1 Basic Notions 



Notation: 

N = {1,2,...},Z = {0,±1,±2,...}DZ+ = {0,1,2,...} = NU{0} 
Q = {rational numbers} 

R = {real numbers } C C = {complex numbers}. 

Principle of Mathematical Induction (PMI): A statement P about Z + 
is true if 

(i) P holds for n = 0; 

and 

(ii) If P holds for all m < n, then P holds for n. (*) 

Inputs for Number Theory: 
Logic 
Algebra 

Analysis (Advanced Calculus) 
Geometry 

A slightly different principle from induction: 

Well ordering axiom (WOA): Every non-empty subset of Z + contains a 
smallest element. 

Note: if S is finite then WOA is obvious and can be checked. Intuitively, 
we often apply it to infinte sets; this is accepting the WOA. 

Lemma: WOA^PMI (for Z+). 

Proof: Suppose (*) (i), (ii) hold for some property P. 
To show: P is true for all non-negative integers. 

Prove by contradiction. Suppose P is false. Let S be the subset of Z + for 
which P is false. Since P is assumed to be false S is non-empty. By WOA, 
3n > such that n is in S, and it is the smallest element of S. If n — 0, 
we would get a contradiction by (i). So n > 0. Since n is the smallest for 
which P is false, it is true for all m < n. By (ii), P holds for n as well. 
Contradiction! So P holds. 

Note: First couple of weeks will be very easy, so use them to learn how to 
write a proof. (People lose more points on easy problems than hard ones.) 
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Remark: In fact, PMI and WOA are equivalent. Try to show PMLt4> 
WOA. 

Theorem: (Euclidean Algorithm) Let a, b be integers > 1. Then we can 
write a = bq + r with q,r G Z, < r < b. 

Proof: Put S = {a — bn\n G Z} H Z + . Claim: S 7^ 0. (Easy) Reason: we 
can take n negative. So by WOA, 5 has a smallest element r. Since r <E S, 
we can write 

r = a — bq, for some g G Z 
Since ScZ + , r > 0. Only thing to check: r < b. Suppose r > b. Then let 

r — a — b(q + 1) — r — b > since r > b. 

Thus r' E S and r' < r, a contradiction. 

Definition: b divides a, written b\a, iff a — bq for some q G Z. If not, write 

Definition: An integer p > 1 is prime iff the only positive integers dividing 
p are 1 and p. 

Examples: 2, 3, 5, 7, 11, 13,. . . 37,. . . 691,. . . 

A positive integer which is not a prime is called a composite number. 
Theorem: Every n G N is uniquely written as 

r 
i=l 

with each pi prime and > 0. 

Proof of unique factorization: 

Step 1: Show that any n G N is a product of primes. 

Proof: If n — 1, OK (empty product =1 by convention). So let n > 1. If 
n is a prime, there is nothing to do. So we may assume that n is composite. 
This means that 3 prime p such that p\n. So n = pq, some q > 1. Use 
induction on n. Since g < n, by induction g is a product of primes. Hence n 
is a product of primes. 

Step 2: Uniqueness of factorization 

Suppose this is false. By WOA, 3 smallest n for which it is false. Write 
n = pi . . .p r = gi . . .q s with ^ primes, 1 < % < r, 1 < j < s, pi ^ qj 
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for any We may assume pi < p 2 < ■ ■ ■ < p r , qi < q-i < • • • < q s and 

Pi < q±. Now set n' = p±q 2 . . . q s < n. Since pi divides n and n', it divides 
(n — n'). We can write 

n-n' = pi£i ... 4 (1) 

for some primes £±, . . . ,£k since n — n' < n and n is the smallest counterex- 
ample. We can also write 

qi ~ Pi = nr 2 • • • n (2) 

for primes n, . . . , r t . On the other hand, n — n' = q± . . . q s — Piq 2 ■ ■ ■ q s , i-e., 
n - n' = (qi - pi)g 2 Then 

n-n' = r x r 2 . . . r t <? 2 • • • q s (3) 

Since n — n' < n, and since n is the smallest counterexample, the two frac- 
torizations of n — n' given by (1) and (3) must coincide. 

Pi £ {ri,r 3 ...,r t ,q 2 ,...,q s } 

But pi 7^ g^; for any j. Thus 

Pi = for some i. 

Then pi divides (gi — pi) =>■ Pi\qi, contradiction! 

Analysis enters when we ask questions about the number and distribution 
of primes. 

Theorem. (Euclid) There exist infinitely many primes in Z. 

Proof: Suppose not. Then there exist only a finite number of primes; 
list them as pi,p 2 , ■ ■ ■ ,p m - Put n = p\p 2 . . .p m + 1. If n is prime we get a 
contradiction since n > p m . So n cannot be prime. Let q be a prime divisor 
of n. Since {pi, . . . ,p m } is the set of all primes, q must equal pj] for some j. 
Then q divides n — p\ . . .p m + 1 and pi . . .p m =^ a contradiction. 

Euler's attempted proof. (This can be made rigorous!) Let P be the set of 

all primes in Z. Euler's idea: If P were finite, then X = Ylpep — < °°- 

(i p ) 
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Lemma. 

Let s be any real number > 1. Then 



(called the "Riemann" zeta function, though Euler studied it a century ear- 
lier). 

Proof of Lemma. Recall: If \x\ < 1, then = 1 + x + x 2 + . . . (geometric 
series). If s > 1, ^ < 1. So -^j- = 1 + ^ + ^ + . . . Then 



111 n s T) 2s / ^— T7« 



F ' n=l 

by unique factorization. 

Euler then argued as follows: let s — > 1 from right. X=lim s _ >1 + Yl™=i ^ ~" > 
S^Li «' wn i cn diverges. But if P is finite, then X is a finite rational number, 
a contradiction. (To make this rigorous, we need to be careful about limits 
and uniform convergence.) 

The Prime Number Theorem (PNT) 
For any x > 2, put 

ir(x) = #{p : prime | p < x}. 

What does 7i(x) look like for x very large? The prime number theorem 
(PNT) says: 

ir(x) ~ , as x — > oo 

logx 

In other words, the fraction of integers in [l,x] which are prime is roughly 
for x large. (Can't prove it in this class.) 

Twin Primes These are prime pairs (p, q) with q = p + 2. 
Examples: (3,5), (5,7), (11, 13),... 

Conjecture: There exist infinitely many twin primes. 

Stronger conjecture: If 7r 2 (a;) denotes the number of twin primes < x, 
then 

TT 2 (x) ~ -p. z-: as X > OO. 

(iogx) 2 
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2 Heuristics on Primes 

Let P = {primes in Z}. We saw two proofs of the fact that P is infinite. 

Prime Number Theorem (PNT). If it(x) = G P\p < x} then n(x) ~ 
T- 2 — for x large. 

log 2 ° 

Heuristic reason: Let F(x) = the fraction of positive integers < x which 
are prime. Then F(x) = We want to take all n < x and then throw out 
composite numbers. First throw out even numbers, i.e., those divisible by 2. 

ffraction of odd numbersl 1/1 
^ which are < x / 2 \ 2 

fraction of numbers which are not divisible by 3 ~ ^1 — — 

We get 

F(x) = U( 1 - 1 - 

p<x 

In fact, we should use the bound ^/x for better accuracy. This way we are 
off by a factor of 2. 
Recall Euler's result: 

W{l'-Y -Y,-- f-dt = \o g x 
p/A PJ t^ x n h t 

Consequently, 

1 x 
F(x) ~ , and so tc(x) 



log a; log a; 

Twin primes 

We are looking for numbers n such that n and n + 2 are prime. 
Put 

7i2(x) = | {twin primes < x}\ 

A heuristic argument: 

Put 

TT 2 (x) 



F 2 (x) = 



X 
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Again, take all n < x and throw out numbers which are not twin primes. 
Check: 

p A <iV Pj log 2 * 

So one expects: 

7r 2 (x) — 2~ Not yet proved! 
log x 

3 More on divisibility and Primes 

Proposition 1: Let ai, a 2 , . . . , a n be integers. Put 

n 

M = {^^diXi\xi G Z,Vi}. 

i=l 

Then M = dZ, for a unique d > 0. (dZ is the set of all integers divisible by 
d.) 

Proof. Certainly, d G M. If M = {0}, take d = 0. Otherwise, put M+ = 
{n G M|n > 0}. Then clearly, M + is non-empty since M ^ {0}, and so by 
WOA, 3 smallest element, call it d, in M + . For any n in M, we can write 
by the Euclidean algorithm: n = dq + r, with q, r G Z, and < r < d. 

Note that M is closed under subtraction. So r = n — dq is also in M. If 
r = 0, we are done because then n = dq as desired. 

Suppose r > 0. Then r G M + . Since r < d, this contradicts the minimal- 
ity of d. Hence r must be 0, and n G dZ. 

Definition: Let ai, . . . ,a n ,d be as in Prop. 1. Then d is called the gcd 
(greatest common divisor) of {ai}. For brevity, write 

d = (ai, . . . , a n ) — gcd(ai, . . . , a n ). 

Check: (ai, (a 2 , a 3 )) = ((ai, a 2 ), a 3 ) 

Definition: {a^} are mutually relatively prime iff (ai, . . . , a n ) = 1. 

Example: (2,3,9) is mutually relatively prime but not pairwise relatively 
prime. 
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Proposition 2. ai,...,a n are mutually relatively prime iff we can solve the 
equation 



in integers. 

Proof. Suppose d = (a\, . . . ,a n ) = 1. Then by Prop.l, 1 = d G M = 
tSr=i a i x i\ x i e So (*) can be solved in integers. Conversely, suppose 
(*) has a solution in integers. Then 1 G M + , and so d — 1. 

Proposition 3. Let a, 6, c G Z, (a, b) = 1. Suppose a\bc. Then a\c. 

Proof. Since (a, b) = 1, by Prop. 2, 3 x,y G Z. Set ax + by = 1. Then 
c = c(ax + fey) = a(cx) + (fec)y. Since a|6c, a divides the right hand side, 
hence a\c. 

Proof of unique factorization in Z. 
Existence 

As shown before, every n > 1 is a product of primes. 

Uniqueness (second proof) 

Let n > 1 be the smallest counterexample. So we can write n = pi . . . p r = 
q± . . . q s , with p iy qj primes and p\ ^ qj for any So 



Since p\ ^ qi, (pi, qi) = 1, and by Prop. 3, ?»i|(?2 • • ■ 9s)- Again, since pi 7^ 52, 
applying Prop. 3 again, Pi | (53 - - ■ ? s ). Finally get pi\q s . So there is no such 
counterexample. 

Third Proof of the Infinitude of Primes in Z (Polya) 

For every n > 1, put F n = 2 2 " + 1, called the nth Fermat number. 

Lemma. If n ^ m, F m ) = 1. 

Proof of Lemma. We may assume m > n. Write m = n + fc, for some 
k > 0. To s/iow: 




(*) 



pi|n = qi . . .q s = gi(g 2 • • -9a)- 



(F n ,F n+fc ) = l (forA;>0.) 
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Suppose d\F n and d\F n+k . Put x = 2 2 " . Then, since 




+ 1 = 2 



+ 1, 



F n +k ~ 2 = X 

F n ^ 



z+ 1 

,2 k -l 



1 



= X 



— X 



2 k -2 



+ 1 G Z 



^F n \(F n+l -2) =s>d|2. 



But F„, F n+fc are odd. So d = 1. Hence the lemma. 

Proof of Infinitude of primes 

Consider Fi, F 2 , . . . , F n . . . By lemma, each F n is divisible by a prime, 
call it p n , not dividing the previous k < n. The sequence {pi,P2, • • • } is 
infinite. 

One has: F 1 = 5, F 2 = 17, F 3 = 257, F 4 = 65537 (Fermat), F 5 = 
(641) (6700417),... 

Primes in "Arithmetic Progressions": 

Fix m > 1, and a G Z such that (a, to) = 1. 
Theorem (Dirichlet) 3 infinitely many primes p which are = a (mod to). 

We cannot possibly prove it in this class. But we can prove the following: 
Baby Lemma 3 infinitely many primes p which are = 3(mod4). 
Proof: Suppose 3 only a finite number of such primes, say 3, pi, p 2 , ■ ■ ■ , p r - 



By unique factorization in Z we can write iV = qiq 2 ■ ■ ■ q s , with the q/s being 
primes. 

Claim 1: Some qj must be = 3(mod4). 

Indeed, every qj is an odd prime as iV is odd, and moreover if qj = 
l(mod4) Vj, then N will also be = l(mod4), contradiction! Hence Claim I. 
Say qi = 3 (mod 4). 

Claim 2: q± ^ {3,pi,--- ,p r }- 

Indeed, if q± = 3, then 3\N, and since = 4pi • • -p r + 3, 3 must divide 
4pi • • -p r , So qi 7^ 3. Suppose qi = pi for some 1 < i < r. Then pi \ N, 

and since N = 4p± ■ • -p r + 3, pi | 3, — ><— . So gi 7^ pj. Hence Claim 2. 



Consider 



iV = 4 Pl p 2 ...p r + 3. 
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So we have produced a new prime q± = 3 (mod 4) which is not in the 
original list, — ><— . 

Remark: There is no such simple argument to prove Dirichlet's theorem for 
primes = l(mod4). We can try to start the same way by assuming that we 
have a finite list of primes = l(mod4), say pi,p2, • • • ,p r , and we can consider 
N = 4pi • • - p r + I. Factor N as qi ■ • • q s . Now the analog of Claim 1 will 
in general fail as the product of an even number of numbers congruent to 3 
(mod 4) is 1 (mod 4). However, we will prove the infinitude of such primes 
later after studying squares mod p. 

Earlier we saw a heuristic reason for expecting there to be an infinite 
number of twin primes, e.g. {3, 5}, {5, 7}, {11, 13}, • • • 
Expectation: 



This means 7r 2 (a;) — ^p-^ goes to as i goes to oo. 

This twin prime problem is closely related to the Goldbach problem, 
which asks if every even number > 4 is a sum of 2 primes. 
Best known result: (Chen) 



A similar heuristic reason makes one expect that there are infinitely many 
primes p of the form n 2 + 1. 

Best known result: (Iwaniec) 




C 




x 



oo. 



2n = ai + a 2 , with prime or a product of 2 primes. 



3 an infinite of sequence {mi, m 2 , • • • } 



such that 



n) + 1, 




The proof is quite hard and beyond the scope of our class. 
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4 Pythagorean Triples 



Problem: 

Find all x, y G N such that 



x 2 + yW (1) 



If d = (x,y,z) > 1, then is another solution, called the primitive 

solution. 

For primitive solutions, we may assume that x is odd and y is even. 

The Geometric Method 

Solving (1) in integers amounts to solving the following in rational num- 
bers: 

X 2 + Y 2 = 1 (2) 

Geometrically, (2) is the equation of the unit circle in M 2 with center at 
O = (0, 0). Try to parametrize the circle. 
One can try as in calculus to set 

X = cos9, Y = sm6. 

This turns out to be terrible for number theory. A better way is to consider 
the parametrization 



1 + t 2 ' 1 + t 2 

This is ingenious as this only involves rational functions. If t e Q, then 
X, Y e Q. Of course 

x +Y - (1+t 2 ) 2 - 1 

As t — > oo (along rationals) then 

1-t 2 



X = -> -1 

1 + t 2 



So we are only missing one solution, (—1,0), which we will remember. 

Y 

i+x- 
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Check: If X, Y e Q, then t G Q. (Show: * = -^.) 



So the rational solutions of (2) are obtained by setting 



1+t 2 ' 1 + t 2 ' 

with t ^ ±1, 0, together with (±1, 0) and (0, ±1). 
Write t = 2 u,v EZ. Then 

u 2 — v 2 2uv 



U 2 + V 2 ' W 2 + f 2 

It follows that the non-zero solutions in Z of (1) are given by 

x = u 2 — v 2 , y = 2uv, z = u 2 + v 2 

with 

u 7^ ±v , u, v ^ 
To get primitive solutions, it is convenient to put 

m = u + v, n = u — v 

9 9 9 9 

m — n m + n 
x = {u + v){u-v) = mn, y = , z = 

For primitive solutions, take m,n odd > 1, m > n, with (m,n) = 1. Check 
that these are all the primitive solutions. 



5 Basic Notions 

Notation: 

N = {1,2,...}, Z = {0,±1,±2,...} DZ + = {0,1,2,... } = NU{0} 
Q = {rational numbers} 

R = {real numbers } C C = {complex numbers}. 

Principle of Mathematical Induction (PMI): A statement P about Z + 
is true if 

(i) P holds for n = 0; 

and 

(ii) If P holds for all m < n, then P holds for n. (*) 
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Inputs for Number Theory: 
Logic 
Algebra 

Analysis (Advanced Calculus) 
Geometry 

A slightly different principle from induction: 

Well ordering axiom (WOA): Every non-empty subset of Z + contains a 
smallest element. 

Note: if S is finite then WOA is obvious and can be checked. Intuitively, 
we often apply it to infinte sets; this is accepting the WOA. 

Lemma: WOA^PMI (for Z+). 

Proof: Suppose (*) (i), (ii) hold for some property P. 
To show: P is true for all non-negative integers. 

Prove by contradiction. Suppose P is false. Let S be the subset of Z + for 
which P is false. Since P is assumed to be false S is non-empty. By WOA, 
3n > such that n is in S, and it is the smallest element of S. If n = 0, 
we would get a contradiction by (i). So n > 0. Since n is the smallest for 
which P is false, it is true for all m < n. By (ii), P holds for n as well. 
Contradiction! So P holds. 

Note: First couple of weeks will be very easy, so use them to learn how to 
write a proof. (People lose more points on easy problems than hard ones.) 

Remark: In fact, PMI and WOA are equivalent. Try to show PMI<^> 
WOA. 

Theorem: {Euclidean Algorithm) Let a,b be integers > 1. Then we can 
write a = bq + r with g,r £ Z, < r < b. 

Proof: Put S = {a — bn\n G Z} H Z+. Claim: S ^ 0. (Easy) Reason: we 
can take n negative. So by WOA, S has a smallest element r. Since r e S, 
we can write 

r = a — bq, for some q G Z 
Since ScZ + , r > 0. Only thing to check: r < b. Suppose r > b. Then let 

r' = a — b(q + 1) — r — b > since r > b. 
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Thus r' G S and r' < r, a contradiction. 

Definition: b divides a, written b\a, iff a = bq for some q E Z. If not, write 
bj(a. 

Definition: An integer p > 1 is prime iff the only positive integers dividing 
p are 1 and p. 

Examples: 2, 3, 5, 7, 11, 13,. . . 37,. . . 691,. . . 

A positive integer which is not a prime is called a composite number. 
Theorem: Every n G N is uniquely written as 

n = f[ P ?\ 

i=l 

with each pi prime and m* > 0. 

Proof of unique factorization: 

Step 1: Show that any n G N is a product of primes. 

Proof: If n — 1, OK (empty product =1 by convention). So let n > 1. If 
n is a prime, there is nothing to do. So we may assume that n is composite. 
This means that 3 prime p such that p\n. So n = pq, some g > 1. Use 
induction on n. Since q < n, by induction g is a product of primes. Hence n 
is a product of primes. 

Step 2: Uniqueness of factorization 

Suppose this is false. By WOA, 3 smallest n for which it is false. Write 
n = pi . . . p r = qi . . . q s with p iy qj primes, 1 < i < r, 1 < j < s, pi ^ qj 
for any We may assume p\ < P2 < • • • < p r , qi < q2 < • • • < q s and 

Pi < q±. Now set n' = piq 2 ■ ■ ■ q s < n. Since pi divides n and n', it divides 
(n — n'). We can write 

n-n = p x i\ ... 4 (3) 

for some primes £i, . . . , £k since n — n' < n and n is the smallest counterex- 
ample. We can also write 

qi~Pi= rir 2 ...r t (4) 

for primes n, . . . , r t . On the other hand, n — n' = q± . . . q s — p±q 2 ■ ■ ■ q s , i.e., 
n - n' = (qi - pi)q 2 ...q s . Then 

n-n = nr 2 . . . r t q 2 ...q s (5) 
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Since n — n' < n, and since n is the smallest counterexample, the two frac- 
torizations of n — n' given by (1) and (3) must coincide. 

Pi £ {ri,r 3 ...,r t ,q 2 ,...,q s } 

But pi 7^ qj] for any j. Thus 

Pi — Ti, for some i. 

Then pi divides (gi — pi) =>- contradiction! 

Analysis enters when we ask questions about the number and distribution 
of primes. 

Theorem. (Euclid) There exist infinitely many primes in Z. 

Proof: Suppose not. Then there exist only a finite number of primes; 
list them as pi,p 2 , ■ ■ ■ ,p m . Put n = pip 2 . . .p m + 1. If n is prime we get a 
contradiction since n > p m . So n cannot be prime. Let q be a prime divisor 
of n. Since {pi, . . . ,p m } is the set of all primes, q must equal pj\ for some j. 
Then q divides n — p\ . . .p m + 1 and p\ . . .p m q\l, a contradiction. 

Euler's attempted proof. (This can be made rigorous!) Let P be the set of 

all primes in Z. Euler's idea: If P were finite, then X = Yl p ep — T - < °°- 

(i p ) 
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Lemma. 

Let s be any real number > 1. Then 



(called the "Riemann" zeta function, though Euler studied it a century ear- 
lier). 

Proof of Lemma. Recall: If \x\ < 1, then = 1 + x + x 2 + . . . (geometric 
series). If s > 1, ^ < 1. So -^j- = 1 + ^ + ^ + . . . Then 
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F ' n=l 

by unique factorization. 

Euler then argued as follows: let s — > 1 from right. X=lim s _ >1 + Yl™=i ^ ~" > 
S^Li «' wn i cn diverges. But if P is finite, then X is a finite rational number, 
a contradiction. (To make this rigorous, we need to be careful about limits 
and uniform convergence.) 

The Prime Number Theorem (PNT) 
For any x > 2, put 

ir(x) = #{p : prime | p < x}. 

What does 7i(x) look like for x very large? The prime number theorem 
(PNT) says: 

ir(x) ~ , as x — > oo 

logx 

In other words, the fraction of integers in [l,x] which are prime is roughly 
for x large. (Can't prove it in this class.) 

Twin Primes These are prime pairs (p, q) with q = p + 2. 
Examples: (3,5), (5,7), (11, 13),... 

Conjecture: There exist infinitely many twin primes. 

Stronger conjecture: If 7r 2 (a;) denotes the number of twin primes < x, 
then 

TT 2 (x) ~ -p. z-: as X > OO. 

(iogx) 2 
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2 Heuristics on Primes 

Let P = {primes in Z}. We saw two proofs of the fact that P is infinite. 

Prime Number Theorem (PNT). If it(x) = G P\p < x} then n(x) ~ 
T- 2 — for x large. 

log 2 ° 

Heuristic reason: Let F(x) = the fraction of positive integers < x which 
are prime. Then F(x) = We want to take all n < x and then throw out 
composite numbers. First throw out even numbers, i.e., those divisible by 2. 

ffraction of odd numbersl 1/1 
^ which are < x / 2 \ 2 

fraction of numbers which are not divisible by 3 ~ ^1 — — 

We get 

F(x) = U( 1 - 1 - 

p<x 

In fact, we should use the bound ^/x for better accuracy. This way we are 
off by a factor of 2. 
Recall Euler's result: 

W{l'-Y -Y,-- f-dt = \o g x 
p/A PJ t^ x n h t 

Consequently, 

1 x 
F(x) ~ , and so tc(x) 



log a; log a; 

Twin primes 

We are looking for numbers n such that n and n + 2 are prime. 
Put 

7i2(x) = | {twin primes < x}\ 

A heuristic argument: 

Put 

TT 2 (x) 



F 2 (x) = 



X 
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Again, take all n < x and throw out numbers which are not twin primes. 
Check: 



p<x 

So one expects: 



fi\ p/ log x 



X 

7r 2 (a;) « — „— ^~ Not y et proved! 
log x 



3 More on divisibility and Primes 

Proposition 1: Let ai, a 2 , . . . , a n be integers. Put 

n 

M = (^OiX^Xi G Z,Vi}. 

i=l 

Then M = dZ, for a unique d > 0. (dZ is the set of all integers divisible by 
d.) 

Proof. Certainly, D e M. If M = {0}, take d = 0. Otherwise, put 
M+ = {n G M|n > 0}. Then clearly, M + is non-empty since M ^ {0}, and 
so by WOA, 3 smallest element, call it d, in M + . For any n in M, we can 
write by the Euclidean algorithm: n = dq + r, with g, r G Z, and < r < d. 

Note that M is closed under subtraction. So r = n — dq is also in M. If 
r = 0, we are done because then n = dq as desired. 

Suppose r > 0. Then r G M + . Since r < d, this contradicts the minimal- 
ity of d. Hence r must be 0, and n G dZ. 

Definition: Let a±, . . . ,a n ,d be as in Prop. 1. Then d is called the gcd 
(greatest common divisor) of {ai}. For brevity, write 

d = (ai, ...,a n ) — gcd(a 1: . . . , a n ). 

Check: (ai, (a 2 , a 3 )) = ((ai, a 2 ), a 3 ) 

Definition: {aj} are mutually relatively prime iff (ai, . . . , a„) = 1. 

Example: (2,3,9) is mutually relatively prime but not pairwise relatively 
prime. 
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Proposition 2. ai,...,a n are mutually relatively prime iff we can solve the 
equation 



in integers. 

Proof. Suppose d = (a\, . . . ,a n ) = 1. Then by Prop.l, 1 = d G M = 
{Sr=i a i x% \ x% ^ Z}. So (*) can be solved in integers. Conversely, suppose 
(*) has a solution in integers. Then 1 G M + , and so d — 1. 

Proposition 3. Let a, 6, c G Z, (a, b) = I. Suppose a\bc. Then a\c. 

Proof. Since (a, b) = 1, by Prop. 2, 3 x,y G Z. Set ax + by = 1. Then 
c = c(ax + fey) = a(cx) + (fec)y. Since a|6c, a divides the right hand side, 
hence a\c. 

Proof of unique factorization in Z. 
Existence 

As shown before, every n > 1 is a product of primes. 

Uniqueness (second proof) 

Let n > 1 be the smallest counterexample. So we can write n = pi . . . p r = 
q± . . . q s , with p iy qj primes and p\ ^ qj for any So 



Since p\ ^ qi, (pi, qi) = 1, and by Prop. 3, ?»i|(?2 • • ■ 9s)- Again, since pi 7^ 52, 
applying Prop. 3 again, Pi | (53 - - ■ ? s ). Finally get pi\q s . So there is no such 
counterexample. 

Third Proof of the Infinitude of Primes in Z (Polya) 

For every n > 1, put F n = 2 2 " + 1, called the nth Fermat number. 

Lemma. If n ^ m, F m ) = 1. 

Proof of Lemma. We may assume m > n. Write m = n + k, for some 
> 0. To show: 



n 




(*) 



p 1 \n = q 1 ...q s = q 1 (q 2 ...q s ). 



(F n ,F n+k ) = l (forA;>0.) 
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Suppose d\F n and d\F n+k . Put x = 2 2 " . Then, since 




+ 1 = 2 



+ 1, 



F n +k ~ 2 = X 

F n ^ 



z+ 1 

,2 k -l 



1 



= X 



— X 



2 k -2 



+ 1 G Z 



^F n \(F n+l -2) =s>d|2. 



But F„, F n+fc are odd. So d = 1. Hence the lemma. 

Proof of Infinitude of primes 

Consider Fi, F 2 , . . . , F n . . . By lemma, each F n is divisible by a prime, 
call it p n , not dividing the previous k < n. The sequence {pi,P2, • • • } is 
infinite. 

One has: F 1 = 5, F 2 = 17, F 3 = 257, F 4 = 65537 (Fermat), F 5 = 
(641) (6700417),... 

Primes in "Arithmetic Progressions": 

Fix m > 1, and a G Z such that (a, to) = 1. 
Theorem (Dirichlet) 3 infinitely many primes p which are = a (mod to). 

We cannot possibly prove it in this class. But we can prove the following: 
Baby Lemma 3 infinitely many primes p which are = 3(mod4). 
Proof: Suppose 3 only a finite number of such primes, say 3, pi, p 2 , ■ ■ ■ , p r - 



By unique factorization in Z we can write iV = qiq 2 ■ ■ ■ q s , with the q/s being 
primes. 

Claim 1: Some qj must be = 3(mod4). 

Indeed, every qj is an odd prime as iV is odd, and moreover if qj = 
l(mod4) Vj, then N will also be = l(mod4), contradiction! Hence Claim I. 
Say qi = 3 (mod 4). 

Claim 2: q± ^ {3,pi,--- ,p r }- 

Indeed, if q± = 3, then 3\N, and since = 4pi • • -p r + 3, 3 must divide 
4pi • • -p r , So qi 7^ 3. Suppose qi = pi for some 1 < i < r. Then pi \ N, 

and since N = 4p± ■ • -p r + 3, pi | 3, — ><— . So gi 7^ pj. Hence Claim 2. 



Consider 



iV = 4 Pl p 2 ...p r + 3. 
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So we have produced a new prime q± = 3 (mod 4) which is not in the 
original list, — ><— . 

Remark: There is no such simple argument to prove Dirichlet's theorem for 
primes = l(mod4). We can try to start the same way by assuming that we 
have a finite list of primes = l(mod4), say pi,p2, • • • ,p r , and we can consider 
N = 4pi • • - p r + I. Factor N as qi ■ • • q s . Now the analog of Claim 1 will 
in general fail as the product of an even number of numbers congruent to 3 
(mod 4) is 1 (mod 4). However, we will prove the infinitude of such primes 
later after studying squares mod p. 

Earlier we saw a heuristic reason for expecting there to be an infinite 
number of twin primes, e.g. {3, 5}, {5, 7}, {11, 13}, • • • 
Expectation: 



This means 7r 2 (a;) — ^p-^ goes to as i goes to oo. 

This twin prime problem is closely related to the Goldbach problem, 
which asks if every even number > 4 is a sum of 2 primes. 
Best known result: (Chen) 



A similar heuristic reason makes one expect that there are infinitely many 
primes p of the form n 2 + 1. 

Best known result: (Iwaniec) 




C 




x 



oo. 



2n = ai + a 2 , with prime or a product of 2 primes. 



3 an infinite of sequence {mi, m 2 , • • • } 



such that 



n) + 1, 




The proof is quite hard and beyond the scope of our class. 
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4 Pythagorean Triples 



Problem: 

Find all x, y G N such that 



x 2 + yW (1) 



If d = (x,y,z) > 1, then is another solution, called the primitive 

solution. 

For primitive solutions, we may assume that x is odd and y is even. 

The Geometric Method 

Solving (1) in integers amounts to solving the following in rational num- 
bers: 

X 2 + Y 2 = 1 (2) 

Geometrically, (2) is the equation of the unit circle in M 2 with center at 
O = (0, 0). Try to parametrize the circle. 
One can try as in calculus to set 

X = cos9, Y = sm6. 

This turns out to be terrible for number theory. A better way is to consider 
the parametrization 



1 + t 2 ' 1 + t 2 

This is ingenious as this only involves rational functions. If t e Q, then 
X, Y e Q. Of course 

x +Y - (1+t 2 ) 2 - 1 

As t — > oo (along rationals) then 

1-t 2 



X = -> -1 

1 + t 2 



So we are only missing one solution, (—1,0), which we will remember. 

Y 

i+x- 
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Check: If X, Y e Q, then t G Q. (Show: * = -^.) 



So the rational solutions of (2) are obtained by setting 



1 + t 2 ' 1 + t 2 ' 

with t ^ ±1, 0, together with (±1, 0) and (0, ±1). 
Write t = 2 ti,« 6 Z. Then 

u 2 — v 2 2m> 



■u 2 + f 2 -u 2 + t> 2 

It follows that the non-zero solutions in Z of (1) are given by 

x = u 2 — v 2 , y — 2uv, z = u 2 + v 2 

with 

To get primitive solutions, it is convenient to put 

m = u + v, n = u — v 

9 9 9 9 

m — n m + n 
x — (u + v) (u — v) — mn, y = , z = 

For primitive solutions, take m,n odd > 1, m > n. Check that these are all 
the primitive solutions. 

5 Linear Equations 

Basic problem: Fix ai, . . . , a n e Z, n > 0. Consider the equation: 

a\X\ + . . . a n x n — a • x — m, (*) 

where a — (ai, . . . , a n ) and x = (xi, . . . , x n ). Determine if (*) can be solved 
in integers. If so, determine all the solutions. 
These are the simplest Diophantine Equations. 

Earlier, we proved that, given ai,...,a n G Z, not all zero, 3! positive 
integer d, the greatest common devisor, such that we can solve 

a\X\ + . . . a n x n = m 



22 



if m is a multiple of d, and that the set 

M = {aiXi + . . . a n x n > 0\xi, . . . , x n e Z} 

is simply gK. Moreover, d is the smallest number in M + = {r e M|r > 0}, 
which exists by the WOA. 
Consequently we have 

Lemma 1. (*) can be solved iff m is a multiple of gcd ({a«}). 

So the basic problem comes down to determining all solutions of a • x — 
dN, for any N > I. 

Suppose n=l; then it is trivial. We have: 

a\ 7^ 0, d — gcd = \ai\, 

and we need to solve 

a x x x = \cn\N (* N ) 
But there is a unique solution, namely: 

Xi = sgn(ai)N 

n=2: 

First look at case gcd=l, N=l. 

a^i + a 2 x 2 = 1 (*i) 

By Lemma 1 there exists a solution, call it (ui, 1*2)- Suppose (v 1, v 2 ) is another 
solution. Then 

aiui + a 2 u 2 = 1 (1) 
aivi + a 2 v 2 = 1 (2) 

Multiply (1) byui; (2) by Ul : 

a\U\V\ + a 2 u 2 v\ = v\ 
a\U\V\ + a 2 u\v 2 = u\ 
a>2{viu 2 - Uiv 2 ) = vi - ui = k 
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Do same with (1) times v 2 , (2) times u 2 to get: 

ai (uiv 2 - u 2 vi) = (v 2 - u 2 ) 

S v ' 

-k 

So 

v\ — 1*1 + ka 2 , v 2 = u 2 — fcai. 

(1*1,1*2) is a particular solution which we use to generate all solutions. 
Conversely, for any integer k, 

(1*1 + ka 2) u 2 - kai) 

is a solution of a ■ x = 1. 

If gcd (ai, 02) = 1, then we can solve a\X\ + 02^2 = 1 in integers. More- 
over, if (1*1, u 2 ) is a particular solution, then any other solution is of the form 
(1*1 + ka 2 , u 2 — kai), k G Z. 

n=2, d >1, N=l: 

aiXi + a 2 a;2 = d (*i) 
Since d =gcd(ai,a2), d\a\ and d\a 2 . Put 6« = ^f. Then (*) becomes 

fei^i + 6 2 ^2 = 1 with (61, b 2 ) = 1. 
So if (1*1,1*2) is a particular solution, every solution is of the form 

This finishes the n = 2 case. We summarize the results in the following 

Proposition Lei 01,02 fre non-zero integers, and let d be their gcd. Then 
the equation 

a\X\ + a 2 X2 = m 

is solvable in integers iff m is divisible by d. Moreover, if (1*1,1*2) is any 
particular solution, then the set of all solutions is parametrized by Z, and for 
each rGZ, the corresponding solution is given by 

a 2 ai 
xi — ui+r—, and x 2 = u 2 — r— . 

a a 
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n, a, N arbitrary: (general case) 

It will be good to understand the example at the end of the section (for 
n — 3). The rest of the section may be difficult and is included here for 
completeness. 

Definition: 

M n (Z) = {a = (a,ij) : n x n — matrices with G Z 

/I \ 



V 



V 



GL n (Z) = {Ae M n (Z) : det(A) = ±1} 
The equation of interest is 

/ Xi 

(ai, . . . ,a„) 



= Nd 



{**) 



V 



Lemma 1. Let a = (ai, • • ■ , a n ) G Z n — {0} d = gcd(ai, • • • , a n ). Then 
3C EGL n (Z) such thataC = de n = (0, ••• ,0,d). 

Proof, n — 1: d = |ai|, so we can take C = (s^n(ai)). Now let n > 1, and 
assume Lemma by induction for m < n. If a± = ■ ■ ■ = a n -\ = we can take 



C = 



I 








sgn (a n ) 



So we may suppose that a 1 :— (ai, • • • , a n _i) G Z n 1 — {0}. 
Let <f = gcd(ai, • • • , a n _i). By the inductive hypothesis, 3 C G GL n ^\ (Z) 
such that a' C" = (0, • • • , d') G Z™" 1 . 



Let 



A 



a 








i 



G GL n (Z). 



Then = (0, • • • ,0,d',a n ). Clearly, d = gcd(d',a n ), and 3x, y G Z such 
that ci'x + a n y = d. 
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Put 



B 



Then (d',a n )B = (0,d). 
Put 



Then 

aC = (aA) 



C = A 



<n-2 



B 



a Id 


T \ 


-d'/d 


y) 


In-2 








B 


-) : 


(o,- 




(o,- 



G SL 2 (Z). 



G GL n (Z). 



In-2 








5 



(3) 
(4) 



Theorem 5.1. Lei a = (ai, • • • , a n ) G Z n — {0} gcd equal to d. 

Let C be the matrix given by Lemma. Pick any JVgZ. Then we have: 



x = 



\X n J 



G IT- 



is a solution of Y^=i a * Xi = ^d if and only if 3toi, • • • , m n _i G Z suc/i £/ia£ 

n— 1 

x = ^2m i C i + NC n 

i=l 

where denotes (Vj) the j-th column of C . 

Proof. 

Let y = x - iVC n . 
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Then 



a ■ x — Nd a-y = 
t 

aC(C- 1 y) = (0,--- ,0,d)(C- 1 y) = 

t 

( mi \ 
1 
1 

m„_i 



C 1 y = m 
t 



, for some rrii E Z, 1 < i < n — 1 



V o / 



n-l 



Cm = y^ j m i C i 



i=i 



t 

x = Cm + NC n . 



Example: Find all the integral solutions of 

5a; + 7y + llz = 2. (*) 

Put a = (5, 7, 11). Then the gcd of the coordinates of a is 1. By Lemma, 

we can find a 3 x 3 - integral matrix C of determinant ±1 such that aC = 

(0, 0, 1). The proof of Lemma gives a recipe for finding C. First solve 

5x + 7y = 1. Since 1 = gcd(5, 7), this can be solved, and a solution (by 

^, ( 7 -4 N 
inspection) is given by x = —4, y " 



3. Put C 



. Next we have 



5 3 

to solve d'u + llf = 1, where d! = gcd(ai,a 2 ) = 1. A solution is given by 

ii r 

Then the proof of Lemma says that 



u 



1, v = 0. Let B 



C 



a 




1 








B 
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Matrix multiplication gives 



C = 








By the Theorem, the complete set of integral solutions of (*) is given by: 



x = 7m — 44n — 8 
y = —5m + 33n + 6 

z = —n 



where m, n e Z 



6 Congruences 

Fix an integer to > 1. We say that two integers a, b are congruent modulo 

m iff m\(a — b). 

Remark: If we had done this for to — 1, then any pair a, b would be 
congruent mod 1. 

If a, b are congruent mod m, we write 

a = b (mod m) 

Modular arithmetic: 

If a is any integer, we can use the Euclidean algorithm to write 

a = mq + r, with < r < m 

Then m\(a — r), so a = r (mod to). 

Consequently, we can partition Z into to blocks, one for each integer r, 
with < r < to. Suppose B r is the block corresponding to r. Then, for any 
a in _B r , a = r (mod to). Note: B — {. . . , — 2m, — m, 0, m, 2m, . . . }, B\ = 
{. . . , —2m + 1, — m + 1, 1, m + 1, 2m + 1, . . . }, etc. 

If m = 2, this partition will yield even and odd integers; the even integers 
are = (mod 2) and the odd integers are = 1 (mod 2). 

These blocks are called congruence classes modulo m. There are 
exactly m classes. We write Z/m for {B , B±, . . . B m ^i}. 

Definition: A set of representatives for Z/m is a subset S = {x , xi, . . . , x. 
of Z such that x r G B r for each r = 0, 1, . . . , m — 1. 
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a 


r 








1 


1 


2 


2 


3 





4 


1 


5 


2 


6 






(mod 3) 



Note: There is a natural choice for S, namely So = {0, 1, . . . , m — 1}, 
called the standard or usual set of representatives. 
So for m = 3, we can use 

So = {0,1, 2} 

or 

Si = {9,16,-1} 

as a set of representatives. 
Claim: 

One has addition, subtraction, 0, and multiplication in Z/m, just like in 

Z. 

Proof. Consider B, h By Look at % + j. By Euclidean algorithm, 

i+j = qm + r i+j , 
for some rj +J - with < r i+ j < m. We put 

Bi + Bj = B r . i+j 

Similarly, Bi — Bj = B ri j , if i — j = q'm + r^j, with < r^j < m. B is 
the "zero" of Z/m, because 

Bo + Bi = Bi = Bi + So 

Multiplication 

=? 

Write = bm + r^, < r^- < m. Put B^Bj = B Tij . Note that 

B\Bj = Bj, for any j. 
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So Bi is the "one" element. Also have distributive and associative laws just 
like in Z. 

Definition: If a G Z, write a (mod m) to denote the block it belongs to. If 
a, b G Z, we write a + 6 (mod m) for any element of Bi + Bj, if a G Bi, b G -B,-. 
Similarly, a& (mod m) is defined. 

Remark. In Z the only numbers we can divide by, i.e., which have "multi- 
plicative inverses", are ±1. The situation is better in Z/m. In fact, when m 
is a prime p, all the non-zero elements of Z/m are invertible (mod m). 

7 Linear Equations mod m 

Given a, c G Z, we want to solve 



with x, y G Z. 

We have looked at * before. 

Recall: 

(i) For * to have a solution in integers, it is necessary and sufficient to 
have c be divisible by the gcd, say d, of a, m. 

(ii) Let u, v satisfy 



This is possible as = 1. 

All the solutions for V are obtained by first finding one solution, say 
(■uq, v o) and writing the general solution as 



ax = c (mod m) 



(*) 



Note that we can solve the "congruence" (I) iff we can solve 



ax + my = c 






for any k G Z. 
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So the general solution of * is given by 

/ / km\ ( ka 
{x,y)=[c[uo + —),c[vo- T 

= (cuq + k-m, cv — k-a] 
\ a d / 

So the general solution to (*) is given by 

x = cuq + k (^j m 

Suppose both solutions of (*) mod m. Then 

a(x — x') = mod m, 

so 

m\a(x — x'). 



Since d = gcd(a, m) we need 



— \(x-x) 



Example, m = 6, a = 4 

4(x - x') = (mod 6), d = 2 44> S\(x - x') 

So 

(x — x') = or 3 (mod 6) 
In general, if (a, m) = d, then 

a(x — x 1 ) = (mod m) ^> rr — rr' is divisible by — 

There exists exactly d distinct solutions of (*) mod m. So we have 
Lemma, ax = c (mod m) has solutions if 

d = gcd(a, m) \ c. 

When d\c, there are d distinct solutions mod m. 

Corollary: ax = 1 (mod m) can be solved iff (a,m) = 1. Moreover, the 
solution is unique in this case. 
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Definition: If (a, m) = 1, we call the unique x (mod m) such that ax = 1 
(mod m) the inverse of a mod m. 

Often, people write it as a 1 (mod m). 

Example, m — 7, a = 2, a' = 4 (mod 7). 

Recall 

S = {0,l,...,m-1} 
is a set of reps, for Z/m. (It is the standard set of reps.) 
Definition: 

(Z/m)* = {Invertible elements of Z/m} 
<p(m) = #(Z/m)* 

Explicitly, 

(/?(m) = |{a 6 {0, 1, . . . , m — 1} |(o, m) = 1}|. 



8 Euler's (^-function 

The function ip introduced above is called Euler's totient function. Note: If 
m is a prime p, then <p(p) = p — 1. 

Theorem. Fix any m > 1. Then, for any integer a relatively prime to m, 
we have 

a^ m) = 1 (modm). 

Corollary (Format's Little Theorem). For any prime p, and for any a 
not divisible by p, 

a p_1 = 1 (mod p). 
This is very useful for computations. 
Example: Compute ll 470 (mod 37). 
Idea: Since 37 is a prime, by Fermat's little theorem, 

a 36 = 1 (mod 37). 

Hence 

32 



Write, using the Euclidean algorithm, 



470 = 366 + r, < r < 37 
= 36-13 + 2 
ll 470 = ll 2 (mod 37) 
= 10 (mod 37). 



Proof of Theorem. Let 

S = {r , . . . ,r„_i} 

be a set of reps, for Z/m, and let (a,m) = 1. Consider 

S' = {ar ,an, . . . ,ar m _i}. 

Claim. S' is another set of reps for Z/m. 
To show the claim, we need to prove 

ari 7^ ar-j (mod m), for i ^ j. 

Suppose ari = arj, for some % ^ j. Then 

(mod m), 



an 



r^), but this contradicts the fact 



i.e., m\a(ri — rj). Since (a, m) = l, m\[r 
that S is a set of reps, for Z/m. Hence the claim. 

So S and S' are both sets of reps for Z/m. In other words, for each 
congruence class Bi and m, 3! number in 5,0 S and in Sjfl S'. Consequently, 
the product of all the numbers in S coprime to m will be congruent (mod m) 
to the product of all the numbers in S' coprime to ml '. 

Moreover, if r\ is coprime to m, so is ar\. So 



| j (ari) = J J r\ mod m) 



ri£S 

(n,m)=i 



(rj,m)=l 



,¥>(m) 



n - 

r j G s 

y(ri,m)=l y 



n 



(mod m) 



\(ri,m)=l J 



=b, say 



33 



=>• a^ m) b = b (mod m), with (6,m) = 1. 
m | (a^ (m) - 1)6. 

Since (6, m) = 1, 

m|a(^ (m) -l), i.e., a^ (m) = 1 (mod m). 

Warning: Little Fermat says that a p_1 = 1 (mod p), for any prime p and 
1 < a < p. It might happen that 3m > 1 which is not a prime and a such 
that 

a m-i = j (mod m). 
For example, consider m = 340 = ( 1 1) (31) , and a = 2. 

2 340 _ 2 11-1 34 _ 1 (mod n) 

by Little Fermat. Also 

2 340 = 2 (31-1)11 . 2 10 = 2 10 (mod 31) 

Clearly, if m is a prime p, then </?(m) = p — 1. It is of great importance 
to have a formula for computing </?(m) even when m is not a prime. To this 
end we prove the following 

Theorem Let m > 1. Write m = YY i= iPT ■> w ^ n Pi?'" >£V primes and 
ai, • • • , a r positive integers. Then 

r 

tp(m) = J] pT' 1 (Pi - 1) (a) 
i=i 

and 

d\m 

Proof: (a) Step 1: Show <p(niri2) = y?(ni)(/?(n 2 ) z/ni,n 2 are relatively 
prime. 
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Proof of Step 1: 

if(mn 2 ) = #{y G {1, 2, • • • , n x n 2 - 1} | (y, nin 2 ) = 1} 

= #{<2jni + bjn 2 | (oj^i + bjU 2 , nin 2 ) = l,ajHiodn 2 , ^modni}. 

But since (ni,n 2 ) = 1, we have 

((a^i + 6,n 2 , ni) = l\ 
and 
(a^ni + 6,n 2 , n 2 ) = 1 J 

Also, (a«ni + bjn 2 ,ni) = 1 iff (bjri2,ni) = 1, that is iff (bj,rii) = 1. 
Similarly, (a^ni + bjn 2 ,n 2 ) = 1 iff (a«,n 2 ) = 1. 
Consequently, 

(p(mn 2 ) = #{ajni + fyn 2 | (a h n 2 ) = 1, (fcj, ni) = f } 
= </?(ni) y?(n 2 ). 

Hence we have achieved Step 1. 

Step 2: If p is a prime and a > 0, then show: (f(p a ) = p a ^ 1 (p — 1). 
Proof of Step 2: 

^(p°) = #{6e{0,...,p°-l} | =^-#{5e{o,l,---,p a }l p | &} =p a -p a -\ 
which proves the assertion. 

Step 3: Proof of the general case. 

By step 1, we have 

r r 

If m = Y[ ^ ! ,then <p(m) = JJ <p (p?) 

i=l i=l 

This is so because (p"%p" J ) = 1 if % ^ j- Now part (a) of the Theorem follows 
by Step 2. 

(b): m — Yld\m ■ So every positive divisor d of m is of the form 
m = ni=i Pi* < 6j < aj. So 

E rt-o = E *- fn • 

d|m {(6i,-,&r)|0<6i<Oi,Vi} \i=l / 
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By part (a) this equals 

{(6i,...,6r)|0<6i<Oi,Vi} 

with <p{p\ l ) being p bi — p^ 1 (resp. 1) if fe, > (resp. fe, = 0). Exchanging 
the sum and the product, and noting that 

r 

E ^) = p-% 

{(6i,...,6r)|0<6i<Oi,Vi} 

we get 

r 

e ^ = n p? = m - 

d\m i=l 



9 Linear congruences revisited 

Theorem. Fix m > 1. Let a, c e Z. Put d = gcd(a,m). Then the 
congruence 

arc = c (mod m) (*) 

has a solution x (mod m) iff d|c. Moreover, when d\c, all d solutions are of 
the form 

cu + mk . , . 
x = (mod m), 

with k G Z, where (tio, fo) is a solution of au + mv = d. 

We already proved (*) has a solution x (mod m) iff d\c. So let d|c. Let 
{uq,vq) be a solution of 

au + mt) = d. (**) 

Multiply by c, get 



acuo + mcvo = cd, 

d J V d 
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/CM \ /cu \ 




=>■ a y-j-j = c (mod to) 

=>• rr = — p (mod to) is a solution of (*). 
o 

Recall that we get all the solutions of (**) by taking 

/ km kc\ 
(u,v) = I M + - -j J , 

as k runs over Z. So the general solution of (*) is given by 

cuo km cuo + km 

x = — — H — = (mod to) 

da a 

Corollary: ax = 1 (mod to) has a solution iff (a, to) = 1. In this case, 3! 
solution, the multiplicative inverse of a mod to, and denoted a' (mod to). 

We knew before that a has a multiplicative inverse if (a, to) = 1. This 
corollary replaces the if by iff. 

Definition: 



Note: By corollary, (Z/m)* is precisely the subset of Z/to consisting of 

elements which have multiplicative inverses mod to. 

Recall: 



(Z/to)* = {a G Z/to|(o,to) = 1}. 



<^(m) = | (Z/m) 



{aG{0,l,...,m-l}|(o,m) = l}|. 



In the previous section we proved the following: 
Theorem: (Euler) For any a E Z with (a, m) = 1, 

a v{m) = 1 (mod m). 



Corollary. (Fermat's Little Theorem) 



m = p (prime), p\a =>• a : 



,p-i 



I (mod p). 



Remark. Fermat's Little Theorem says that 



x 



,p-i 



(mod p) 
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has p — 1 solutions mod p, namely 

x = 1, 2, . . . , p — 1 (mod p) 

=^ a p - a = (mod p), Va = 1, 2, . . . ,p - 1. 
This is also true for 

a = (mod p). 

So, 

x p — x = (mod p) 
has p solutions mod p. On the other hand, 

x p = (mod p) 

has only one solution, namely rr = (mod p) . In other words, if a ^ (mod 
p), then a p cannot be (mod p). 

Claim. If ab = (mod p), then either a or 6 must be = (mod p). 
Proof of Claim. Suppose a ^ (mod p). Then 

ae (Z/p)*, 

and so 3a' such that a'a = 1 (mod p). Multiple both sides of ab = (mod 
p) by a' to get (aa')b = (mod p), giving 

6 = (mod p). 



Conclusion: Z/p has no "zero divisors." 

Note: If m is any integer > 1 which is not a prime, then Z/m has zero 
divisors. 

Proof. Since m is composite, we can write m = mi,m 2 with mi,m 2 > 1. 
then 

mim 2 = (mod m), 
but neither mi nor m 2 is = (mod m). 

Moral: Congruences modulo a prime p are nicer to study. They have much 
more structure. 
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10 Number of solutions modulo a prime 



Theorem (Lagrange) Fix a prime p and integer n > 1. Let f(x) = a n x n + 
• — h ao be a polynomial with coefficients a« G Z, such that some aj is prime 
to p. Then the congruence 

f(x) = (modp) (1) 
has at most n solutions mod p. 

Proof: Suppose n = 1. Then the congruence is airr = — a (modp). By 
hypothesis, either a± or ao is not divisible by p. The former case must happen 
as otherwise we would have = — ao (mod p), implying ao is also = (mod 
p), leading to a contradiction. Thus a\ is invertible modp; let a[ be such 
that a[ ai = l(modp). Multiplying a±x = — a (modp) by a[, get 

(a^ai)^ = x = — a' 1 ao(modp) 

Thus we get a unique solution, and the Theorem is O.K. for n—1. 

Now let n > 1, and assume by induction that the Theorem holds for all 
k < n. Suppose (1) has no solutions modp. Then there is nothing to prove. 
So we may assume that there is at least one solution, say x = x\ (modp). 
Then we get 

/(xi) = 0(modp). (2) 

Subtracting (2) from (1), we get 

f(x) - f( Xl ) = a n (x n - x^) + an-^x"- 1 - x^ 1 ) + ■ ■ ■ a^x - Xl ) ee (modp). 

But for any k > 1, (x — xi) \ (x k — x\), so f(x) — f(xi) = (x — xi)g(x), where 
g{x) is a polynomial in x of degree k — 1. Thus, /(#) — /(^i) = (modp) 
holds iff 

(x — xi)g{x) ee (modp). (3) 
Then either rr — x\ = or 

ee O(modp) (4) 

The coefficients of ^ cannot all be ee (mod p), for otherwise f(x) would be 
congruent to (mod p). Since the degree of g is < n, we then have by the 
inductive hypothesis, that the number of solutions of (4) mod p is bounded 
above by n — 1. Then the number of solutions mod p of (1) is < 1 +n — 1 = n. 
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11 Remarks on Fermat's Last Theorem and 
an approach of Gauss 



Recall the Fermat equation x n +y n = z n . For n — 2, this leads to Pythogorean 
triples and we classified all the solutions in this case. 

Theorem (A. Wiles) ('97): For n > 3, x n + y n = z n has no positive integral 
solutions. 

There is no way we can prove this magnificient result in this class. 

Note: To prove this, it suffices to prove in the cases where n = 4 and 
when n = p, where p is any odd prime. 

Reason: If m\n, then any solution of u n + v n = w n will give a solution for 
m, namely ( u n/m ) m + ( v n / m ) m = {w n l m ) m . 

Moreover, for any n > 3, n will be divisible by 4 or by an odd prime p. 

We also proved in the first week that x 4 +y 4 = z 4 has no integral solutions 
for. (In fact, we showed Fermat's result that x 4 + y 4 = w 2 has no integral 
solutions.) Consequently, the key fact needed to be proven is that x p +y p = z p 
has no solution for any odd prime. 

This gets split into two cases: 

Case I: p \ xy z. 
Case II: p \ xyz. 

Proposition (Gauss). Suppose the congruence 

(*) x p + y p = (x + y) p (modp 2 ) 

has no non-trivial solutions, i.e. with none of x, y, x + y = (modp). Then 
Case I of FLT holds for p, i.e. 

$x,y,z E Z >0 , p\xyz, such that x p + y p = z p . 



Note: 
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= x p + yP + 



(x + y) p = x p + y p (modp). 



Proof of Prop. 

Suppose we have positive integers x, y, z, with p \ xyz, such that x p +y p = 
z p . We have just seen that x p +y p = (x+y) p (modp), so z p = (x+y) p (modp). 

Moreover, we have the Little Fermat Theorem, which says that x p = 
x(modp), z p = z(modp), y p = y(modp), and (x + y) p = x + y(modp). 
Consequently, z = x + y (modp), i.e. z = x + y + mp, for some m G Z. 

Since x p + y p = z p , we get 



= (mp) p + p(x + y) (mp) p + • • • + p(x + y) p {mp) + (x + y) p . 
Therefore x p + y p = (rr + y) p (modp 2 ) 

Difficulty: 

If p = 1 (mod 3), one can always solve the congruence x p + y p = (x + 
(modp 2 ). So Gauss's Proposition doesn't help us. On the other hand, 

when p = 2(mod3), for many small primes, x p + y p = (x + y) p (modp 2 ) has 

no solution. 

Still, there are primes p = 2 (mod 3) for which 3 solutions to this con- 
gruence. This happens for 13 primes less than 1000. For example, when 



p = 59, l 59 + 3 59 = 4 59 (mod 59 2 ). 

12 Mersenne Primes and Perfect Numbers 

Basic idea: try to construct primes of the form a n — 1; a, n > 1. e.g., 
2 1 - 1 = 3 but 2 4 - 1 = 3 • 5 
2 3 - 1 = 7 

2 5 - 1 = 31 

2 6 - 1 = 63 = 3 2 • 7 

2 7 - 1 = 127 

2 11 - 1 = 2047 = (23) (89) 
2 13 - 1 = 8191 




p-i 



41 



Lemma: x n - 1 = (x - l)(x n_1 + x n ~ 2 H h x + 1) 

Corollary: (x - l)|(:r n - 1) 

So for a n — 1 to be prime, we need a = 2. 

Moreover, if n = md, we can apply the lemma with x = a d . Then 

{a d - l)|(a n - 1) 

So we get the following 

Lemma If a n — 1 is a prime, then a = 2 and n is prime. 
Definition: A Mersenne prime is a prime of the form 

q = 2 P — 1, p prime. 

Question: are they infinitely many Mersenne primes? 
Best known: The 37th Mersenne prime q is associated to p = 3021377, 
and this was done in 1998. One expects that p = 6972593 will give the next 
Mersenne prime; this is close to being proved, but not all the details have 
been checked. 

Definition: A positive integer n is perfect iff it equals the sum of all its 
(positive) divisors < n. 

Definition: a(n) = J2d\n^ (divisor function) 

So u is perfect if n = a{u) — n, i.e. if a{u) = 2n. 
Well known example: n = 6 = l + 2 + 3 
Properties of a: 

1. a(l) = l 

2. n is a prime iff a(n) — n + 1 

J + l 1 

3. If p is a prime, a(p J ) = l+ p + -- - + p 3 = p p _~ 

4. (Exercise) If (ni,n2) = 1 then cr(ni)o"(n 2 ) = o-(nin 2 ) "multiplicativity" . 
Consequently, if 

r 

n = Yl p i i e i - 1 Vj ' Pi P rime , 
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j= i j= i \ f 

6=1+2+3 

Examples of perfect numbers: | 1+2+4+7+14 

8128 

Questions: 

1. Are there infinitely many perfect numbers? 

2. Is there any odd perfect number? 
Note: 

6=(2)(3), 28=(4)(7), 496=(16)(31), 8128=(64)(127) 
They all look like 

2«-i( 2 "-l), 
with 2 n — 1 prime (i.e., Mersenne). 

Theorem (Euler) Let n be a positive, even integer. Then 



n 



is perfect n = 2 P 1 (2 P — 1), for a prime p, with 2 P — 1 a prime. 



Corollary. There exists a bijection between even perfect numbers and 
Mersenne primes. 

Proof of Theorem. (<=) Start with n = 2 p ~ 1 q, with q = 2 P — 1 a Mersenne 
prime. To show: n is perfect, i.e., a(n) = 2n. Since 2 p ~ 1 q, and since 
(2 p ~ 1 ,g) = 1, we have 

a{n) = (J{2 p ^)a{q) = {2 P - l)(q + 1) = g2 p = 2n. 

(=>■): Let n be a even, perfect number. Since n is even, we can write 

n = 2 1 m, with j > 1, m odd 7^ n 

^ a(n) = a(2 j )a(m) = (2 j+1 - l)a(m) 

Since n is perfect, 

a{n) = 2n = 2 j+1 m 
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Get 



2 1+1 m = (2 3+l - 1) u\ 



m) 



odd 



so 



for some r > 1 
Also 

so 



2 1+1 \a(m); 

r2 j+1 = a{m) (1) 

2 ]+l m = (2 J+1 - l)r2 J+1 , 

m = (2 J+1 - l)r (2) 



Suppose r > 1. Then 

m = (2 j+1 - l)r 

will have l,r and m as 3 distinct divisors. (Explanation: by hypothesis, 

1 7^ r. Also, r = m iff j — iff n = m, which will then be odd!) 

Hence 

<r(m) >1 + r + m 

= 1 + r + (2 J ' +1 - l)r 
= 1 + 2 i+1 r 
= 1 + o-(m) 



Contradiction! 

So r = 1, and so (1) and (2) become 



aim) 



y+i (i') 



2 J ' +1 - 1 (2') 



Since n = 2 J m, we will be done if we prove that m is a prime. It suffices to 
show that a(m) —m+1. But this is clear from (1') and (2'). 
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M n = 2 n — 1 Mersenne number. Define numbers S n recursively by setting 
S n = S 2 ^ - 2, and Si = 4. 

Theorem: (Lucas-Lehmer Primality Test) Suppose for some n > 1 that M n 
divides S„_i. Then M n is prime. 

Proof. (Very clever) Put a = 2 + V3, f3 = 2 - Note that a + (3 = 4, 
a/? =1. So Si = a + f3. 

Lemma. For any n > 1, S n = a 2 " 1 + [3 2n 1 . 

Proof of Lemma: n = 1 : Si = a + /3 = 4. So let n > 1, and assume that 
the lemma holds for n — 1. Since 

Sn = S 2 _ t — 2 

we get (by induction) 

S n = (CK + fJ ) - 2 

Note: 

(a k + {3 k f = a 2k + 2a k p k + f3 2k 

= a 2k + f3 2k + 2, as a[3 = 1. 

So we get (setting k = 2 n ~ 2 ) 

on— 1 .on- 1 _ _ 

S n = a 2 +(3 2 +2-2. 

Hence the lemma. 

Proof of Theorem (continued): Suppose M„|S„_i. Then we may write 
rM n = S„_i, some positive integer. By the lemma, we get 

rM n = a 2 "' 2 + [3 2n - 2 (3) 
Multiply (3) by a 2 " 2 and subtract 1 to get: 

a 2 "" 1 = rM n a 2n ~ 2 - 1 (4) 

Squaring (4) we get 

a 2 " = (rM n a 2 "- 2 - l) 2 (5) 



45 



Suppose M n is not a prime. Then 3 a prime £ dividing M n , £ < \JM n . Let 
us work in the number system 

R = {a + bV3\a,be Z} 

Check R is closed under addition, subtraction, and multiplication (it is 
what one calls a ring). Equations (4) and (5) happen in R. Define R/l = 
{a,bVS\a,be Z/L\. 
Note: \R/£\ = £ 2 

We can view a, (3 as elements of R/L Since £\M n , (4) becomes the fol- 
lowing congruence in R/L 

a 2 "' 1 = -1 (mod £) (6) 

Similarly, (5) says 

a 2 = 1 (mod £) 

Put 

X = {a j mod £\1 <j < 2 n }. 

Claim \X\ = 2™. 

Proof of claim. Suppose not. Then 3j,k between 1 and 2™, with j ^ k, 
such that a- 7 ee a k (mod £). 

If r denotes |j — k\, then < r < 2 n and a r = 1 (mod £). Let (i denote 
the gcd of r and 2 n , so that ar + 62™ = d for some a,b e Z. Then we have 

But since d\2 n , d is of the form 2 m for some m < n, and a d = 1 (mod f) 
contradicts a 2 " ee — 1 (mod £). Hence the claim. 

So \X\ < £ 2 - 1, i.e., we need 2 n < £ 2 - 1. 
Since 

£ < v^n, £ 2 - 1 < M n = 2™ - 1. 

=^ 2" < 2" - 1, a contradiction! 
So M n is prime. 
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13 RSA Encryption 



The mathematics behind the very successful RSA encryption method is very 
simple and uses mainly Euler's congruence for any JV > 1: 

W {N) = 1 (mod JV) 

if (b, N) = 1. (When N is a prime, this is Fermat's little theorem.) 

Imagine that a person X wants to send a carefully encrypted message to 
another person Y, say. X will look in a directory which publishes the public 
key of various people including Y . The public key of Y will be a pair (e, JV) 
of positive integers, where N will be a large number which is a product of 
2 distinct primes p and q. The point is that the directory will contain no 
information on the factorization of N. For large enough N it will become 
impossible (virtually) to factor N. The number e will be chosen mod N and 
it will be prime to <p(N). 

The person X will first represent his/her plain text message by a numeral 
a (which can be done in many ways) . For simplicity, suppose that a is prime 
to JV. X will then raise a to the power e mod JV and send the message as b. 
So 

b = a e (mod N). 

If someone intercepts the message, he or she will be unable to recover 
a from b without knowing the factorization of JV. So it is secure. On the 
other hand, the recipient of the message, namely Y, will be able to decode 
(decrypt) the message as follows. He/she will pick a number d (decryption 
constant) such that 

de = 1 (mod (p - l)(q - 1)). 

Y can do this because he/she knows the prime factors p, q and because e is 
prime to (p(N); observe that since p and q are distinct primes and iV = pq, 
one has 

<p(N) = v(pMq) = (p-l)(g-l). 
So by applying Euler's congruence mod N, we get 

b d = a ed = a i+<<P-i)(«-i) = a ( mo d jV). 

Thus Y recovers a. 

Note that if someone does not have the factorizatino of JV, he/she cannot 
decrypt the message. 
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14 Primitive roots mod p and Indices 

Fix an odd prime p, and igZ. By little Fermat: 

x p ~ x = 1 (mod p) if x ^ (mod p) 

E.g. 



re 


a; 2 


X 3 




1 


1 


1 


1 


2 


-1 


3 


1 


3 


-1 


2 


1 


4 


1 


-1 


1 



2 and 3 are called "primitive roots mod 5" since no smaller power than 
p — 1 is = 1. 

Definition: Let x £ 1*, p /fx. Then the exponent of x (relative to p) is the 
smallest integer r among {1, 2, . . . ,p — 1} such that x r = 1 (mod p). One 
writes r = e p (x). 

When p = 5, e 5 (l) = 1, e 5 (2) = 4 = e 5 (3), e 5 (4) = 2. 

Definition: X IS cL primitive root mod p iff e p (x) = p — 1. 

Again, when p = 5, 2 and 3 are primitive roots. 

Claim: For any x prime to p, 

e p (x)\(p-l). 

Proof: Since 1 < e p (x) < p — 1, by definition, it suffices to show that 

d = gcd(e p (x),p- 1) > e p (x). 

Suppose d < e p (x). Since d is the gcd of e p (x) and p — 1, we can find a, b e Z 
such that ae p (x) + 6(p — 1) = d. Then 

_ a .oe p (x)+6(p-l) _ [x ev ^Y {x P ~ 1 ) b 

But 

x p_1 = 1 (mod p) by Little Fermat, 

and 

x e p( x ) = x (mod p) by definition of e p (x). 
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Thus 

x d = 1 (mod p) 

Since we are assuming that d < e p (x), we get a contradiction as e p (x) is the 
smallest such number in {1, 2, . . . ,p — 1}. 

=>- d > e p (x). 

Since d = gcd(e p (x),p— 1), d\e p (x) =>• d = e p (x). Hence the claim. 
Two natural questions 

1. Are these primitive roots mod pi 

2. If so, how many? 

For p — 5, the answers are (1) yes, and (2) two. 

Theorem: Fix an odd prime p. Then 

(i) 3 primitive roots mod p 

(ii) ^{primitive roots mod p = ip(p — 1). 

Proof: For every (positive) divisord of p — 1, put 

^) = #{xe{i,...,p-i}Mx) = ( |} 

Both (i) and (ii) will be proved if we show 

1>(p-l)=<p(p-l). (*) 

We will in fact show that 

m = m vd|(p-i) 

Every x in {1, . . . ,p — 1} has an exponent, and by the claim above this 
exponent is a divisor of d. Consequently 

(p - 1) = £ ^(d) (1) 
d\( P -i) 

Recall that we proved last week 

p-l= <P(d) (2) 

d\( P -i) 
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Consequently, 

m = E ^ ( 3 ) 
di(p-i) di(p-i) 

It suffices to show that 

#J) <¥>(<*) Vd|(p-1) (A) 

Proof of (A): Pick any d|(p — 1). If ip(d) = 0, we have nothing to prove. 
So assume that ip(d) ^ 0. Then 

3a G {1, ... ,p — 1} such that e p (a) = d. 

Consider 

y = {l,a,...,a d - 1 } 

Then (dP) a = 1 (mod p). Further, F supplies d distinct solutions to the 
congruence 

x d = 1 (mod p). 

We proved earlier (LaGrange) that, given any polynomical /(#) with integral 
coef's / degree n, there are at most n solutions mod p of f(x) = (mod p). 
So x d — 1 = (mod p) has at most d solutions mod p. Consequently, F is 
exactly the set of solutions to this congruence and j^Y = d. Hence 

^(d) = #{a j e Y\e p {a ] ) = d}. 

Proof of claim: Let r = gcd(j, d). Then, by the proof of the earlier claim, 

e p (a 3 ) = ^. 

So r = 1 iff e p (a J ) = d. This proves the claim. 
Thanks to the claim, we have: 



j e{0,l,...,d-l} 

(J, d) = 1 



< ip(d) for all d\(p- 1). 



In fact we see that ^(d) =0 or y?(d), which certainly proves (A), and hence 
the Theorem. 
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2 is a primitive root module the following primes < 100: 
3, 5, 11, 13, 19, 29, 37, 53, 59, 61, 67, 83 

Artin's Conjecture 

There are infinitely many primes with 2 as a primitive root. 

More generally, for any non-square a, are there infinitely many primes 
with a a prime root? 

Claim: 

e p (a J ) = d iff (j, d) = 1. 

This cannot be true if a is a perfect square. Indeed if a = b 2 , since 
frd?- 1 ) = i (mod p), if p J(b, we have 

= 1 (mod p). 

So, for any odd p J(a, e p (a)\( E Y-). Similarly, a = —1 is a bad case, because 

(-1) 2 = 1 and e p (-l) = 2 or 1, Vp odd. 
So we are led to the following 

Generalized Artin Conjecture. Let a be an integer which is not -1 and 
not a perfect square. Then 3 infinitely many primes such that e p (a) — p—1. 

Here is a positive result in this direction: 

Theorem: (Gupta, Murty, and Heath-Brown) There are at most three pair- 
wise relatively prime a's for which there are possibly a finite number of primes 
such that e p (a) = p — 1. 

Problem: no one has any clues as to the nature and size of these three 
possible exceptions, or whether they even exist. Is 2 an exception? 

Indices 

Fix an odd prime y and a primitive root a mod p. We can consider 

Y = {a j \0 < j <p- 1}. 

Then each element of Y is in (Z/p)* and we get p—1 distinct elements. But 
#(Z/p)* — p—1. SoY gives a set of reps, for (Z/p)*. 
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Consequently, given any integer b prime to p, we can find a unique j G 
{0, 1, . . . ,p — 2} such that b = a J (mod p). 

This (unique) j is called the index of b mod p relative to a, written I p (b) 
or 1(6). Properties: J(a6) = I(a + 6), J(A;a) = kl(a). 



15 Squares mod p 

Fix a prime p. 

Basic question: Given a, how can we determine if 3b G Z such that a = b 2 
(mod p)? 

Trivial case if p|a, take 6 = 0. So from now on take (a,p) = 1. 



p= 


:3 


p=£ 




P= 


7 


X 


x 2 


X 


x 2 


X 
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1 
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-1=4 


1 


5 


4 










6 


1 



1 = d v 

2^ 
Guess 



1,4 as mod 5 
2,3^ 



1, 2, 4 as mod p 
3,5,6^ 



# of squares in (Z/p)* = # of non-squares in (Z/p) H 
p odd, p /a. 

Definition: the Legendre symbol of a mod p is given by 



1, if a = and p 
— 1, if a ^ mod p 



We say a is a quadratic residule mod p if it is a , otherwise a quadratic non- 
residue. (Some would allow a to be divisible by p and set (^) = if p|a.) 



Lemma: the guess is on the money. 

Proof: Let S — {1, 2, . . . ,p — 1}. We know that S* is a set of reps, for (-] 
Put 

/ = 0.:> '' ' 
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and 

T 2 = {b 2 \b G T} 

Claim 1: #(T 2 mod p) = i.e., if b, c G T, b ^ c, then b 2 ^ c 2 (mod p). 
Indeed, if p 2 = c 2 (mod p) then b = ±c (mod p). This cannot happen as, 
\/b G T, 3!6' in S — T such that b' = —6 (mod p), unless b = c. 

Claim 2: T 2 = S 2 (mod p) 

Proof: Let a £ S — T. Then 3!a' G T such that a' = a (mod p). Then 
a 2 = (a') 2 (mod p). Hence a 2 G T 2 mod p the equare of any elt. of S is 
in T 2 mod p. Hence the claim. 

But #{quad res. mod p = #S* 2 (mod p). By claims 1 and 2, there is 
V^#{non}=p-l-^i = ^i. 

Corollary of Lemma: Let p be an odd prime, then 




Proof: 



E ! + E 



a 

,p / * — ' \ p 

quad rcsv x j quad non-res^. > 

1 -1 

= l#{quad res.} — l#{quad non-res.} 
p- 1 p- 1 = 



2 2 

Lemma: Let a, 6 be integers prime to p. Then 

/ (b 



\P J \Pj \P 



Proof: 

Case 1: a,b are both q,r,m,p., i.e. a = af, b = b 2 (mod p) for some a, 6. 
Hence a& = (aA) 2 (mod p), and (f) = = 1-1. 

Case 2: (J) = 1, (J = -1. Suppose (^) = 1. Then 3c such that ab = c 2 . 
Since (-) = 1, 3ai such that a\ = a (-j-p). =>■ a 2 & = c-=-p. 
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Since p /[ai, a± is invertible mod p, i.e., 3a2 such that a\a<i = 1. Then 
a 2 ^ = 1. 

=>- b = ale 2 (mod p) =>- ^-^j = 1. 

So (^) = -1 when (2) = 1 and (J) = -1. 
Case (iii) (-) = —1, (-) = 1 same as (ii). 
Case (iv) (jj) = (J) -1 (Try this!) 

Lemma 3 (Wilson's Theorem) For any prime p, (p — 1)! = — 1 (mod p). 

Proof: If p = 2, both sides = 1 (mod 2), done. So assume p odd. Look at 
S — {1, ... ,p — 1}, set of resp. foralla G S, let a' be the unique elt. of S 
such that aa' = 1 (mod p) . 

a = a' iff a 2 = 1 (mod p), i.e., iff a — 1 or a — p — 1. So, 

VaG {2, . . . ,p- 2}a' 7$ a and a' G {2, ...,p-l}. 



(2)(3) • (p-2) = 1 (modp). 

(p — 1)! = l(p — 1) (mod p) 
= —1 (mod p). 

Proposition (Euler's criterion) Let p be an odd prime, and let a G Z with 
(a,p) = 1. Then 

— ) = (mod p) 
p/ 

Recall that the Little Fermat theorem says that 
a p_1 = +1 (mod p) since p /a; 

P-i 

so a 2 = ±1 (mod p). 

Corollary of Proposition (Strict multiplicativity) 

w) = f*\(t\ y a ,b ez with p J(ab. 



p j \pj \p 
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Proposition =>- Corollary 1: By Euler, 



abY 

p • 



a P 2 j (}) P 2 j 

p) VP, 



Corollary 2 of Proposition: If p = odd prime, -1 is a square mod p iff 
p = f (mod 4). 

p-i 

Proposition=^Corollary 2: By Euler, (-^) = f iff (—1) 2 =1 (modp). 
Since p is odd, p = f (mod 4) are -1 (mod 4). 

p = 1 (mod 4): 

p = 4m + 1, some m G Z: 

(-1)^ = (-l) 2m = I 

p = — 1 (mod 4): 
p = 4m — 1: 

(-1)^ = (-I)" 1 = -f (modp). 

Proof of proposition: By Fermat, a p_1 = 1 (mod p). Since p is odd, 
G Z and we can factor: 

a^_l = (a V _ i) ( fl ¥ _ i) 

=0 by Fermat 

=>- {a^ - lj {a^ + lj = mod p 

p— i 

=>- a~ = ±1 (mod p). 
Now suppose a is a square mod p. Then 3b such that a = b 2 (mod p). So 

= (6 2 )^ ee 6 p - x ee 1 (mod p). 

So: 

' a , ^_ 

1 =>- a 2 ee 1 (mod p). 
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p-1 

On the other hand, the congruence X 2 — 1 = (mod p) has at most ^y- 
solutions mod p by Lagrange. We have just proved that, given any quadratic 
residue a mod p, 

= 1 (mod p), 

i.e., a is a solution of 

p-i 

X 2 _l = o (mod p. 
By lemma 1, there exists exactly quadratic residues mod p. Consequently, 



X P 2 —1 = (mod p) 



has exactly solutions, and each of them is a quadratic residue mod p. In 

other words, if a is a quad, non-residue mod p, then a is not a solution of 

p-i 

X 2 =0 (mod p). 

=5- = — 1 (mod p) = ^— ^ (mod p) 

if a ^ (mod p). 

To summarize, we have the following properties of (-): 

(i) (2$) = (2)(£) Product formula 

p-i 

(ii) (— = (— 1) 2 (mod p), i.e., -1 is a square (mod p) iff p = 1 (mod 4). 
Remark: 

Thanks to (i) and the unique factorization in Z, in order to find (^) for 
any a, (a,p) = 1, we need only know 

— J , ( - J , and ( - J , g^pan odd prime. 
p J \pj \pj 

We have already found a formula for (^). 

As an application of (ii) we will prove the following, special case of Dirich- 
let's theorem: 

Proposition: There are infinitely many primes p which are congruent to 1 
modulo 4. 
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Earlier we proved that there exists infinitely many primes = 3 (mod 4) in 
the following way: Suppose there exists a finite number of such primes. List 
them as 3, p\, . . . ,p r . Consider 

N = 4pi . . . p r + 3. 

Factor iV as q±, . . . z s , qj prime for all j. Since N is odd, each qj is an odd 
prime. Moreover, since N = e (mod 4), since qj must be = 1 [3?] (mod 4). 
But this qj cannot be among {3,pi, . . . ,p r }- 

Suppose we tried this for primes = 1 (mod 4). Assume there exists only 
finitely many such primes Pi, ■ ■ ■ ,p m - Put iV = 4pi . . .p m + 1. Factor N as 
q± . . . q s . Since N is odd, each qj is an odd prime. But, if s is even, we cannot 
hope to say that some qj must be = 1 (mod 4). The method breaks down. 

Proof of Proposition: Now we try again using (ii). Again start by assum- 
ing there exists only a finite number of primes = 1 (mod 4), say Pi, ■ ■ ■ ,p m - 
Let N = 4(pip 2 . . . p m ) 2 + 1. Factor N as q± . . . qk, qj prime for all j. Evi- 
dently, each qj is an odd prime because N is odd. 

Claim: 

Every qj is = 1 (mod 4). 

Proof of Claim: Pick any odd prime qj dividing N. Then, since N = 
(2p 1 . . .p m ) 2 + 1, we get —1 = b 2 (mod qj), where b = 2p 1 . . .p m . By the 
criterion (ii), -1 is a square mod qj iff qj = 1 (mod 4). Hence the claim. 

So qj is a prime which is = 1 (mod 4), and it cannot be among {pi, . . . ,p m } 
because if p± = qj for some i, we will get 1 = (mod qj), a contradiction, 
proving the proposition. 

Remark This proof tells us a way to generate new primes which are = 1 
(mod 4) from known ones. Here are some simple examples: 

1. Start with 5, and consider N = 4(5) 2 + 1 = 101; this is a prime. 

2. Start with 13, and consider N = 4(13) 2 + 1. Then N = 677, also prime. 

3. Start with 17. N = 4(17) 2 + 1 = 1157 = (13)(89). Note: 13 and 89 are 
both = 1 (mod 4). 

Next Question: When is 2 a square mod pi To answer this question, Gauss 
proved a very useful lemma: 
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Proposition A (Gauss' Lemma) Fix a, prime to p. Let S be a subst of N 
such that SU (-S) is a set of reps, for (Z/p)*. Given any sG S, we can then 
write as= e s (a)s a (mod p), where sG S and e B (a) G {±1}- Then 



P' ses 

Proof: Let s, s' be distinct numbers in S. Then 

as ^ as' (mod p), i.e., s a ^ s„. 

Hence the map S — > 5 given by s^ s a has to be a bijection, i.e., 1-1 and out. 
(This is also called a pem. or a rearrangement of S.) We get 

f\(as) = Yl e s (a)s a (mod p) 
ses^ ses 

^ Uses s 



) ri sa ) ( m ° d p) 

vseS ) VseS 

I "J S (mod p) 



ses 



P-i 

So a 2 (Ilses s ) = (Ilses e s(a))(n se s s ) (modp)= mod p 

Cancelling (rises'-*)' which is invertible mod p from each side, get 



a 2 ^ = l[e s (0) 



p-i 

ses 

Done because 



a 2 = - mod p. 
VP/ 

Remark, people very often take 5 to be the "canonical" half set of reps for 
(Z/p)*, namely S = {1,2,...,^}. 

Formulation (II) of Gauss' Lemma: Let S — {1,2, ... , 2 ^}. For each 
j G S 1 , find the smallest positive residue dj of a^ mod p. This is well defined, 
and 

a.j G {l,2,...,p-l}. 
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Let 



Then Gauss' Lemma says 
Corollary of Gauss' lemma: 



k = #{j G Sfo g S}. 



(_l)«(p) > 



is the number of integers s such that 



Explicitly, 



p- 1 p- 1 

— : — < s < — - — . 



1, p = ±1 (mod 8) 
-1, ifp = ±5(mod8) 



Proof. Apply Gauss' lemma to S = {1, 2, . . . , £=±} with a = 2. Then 

f i if 2s < 

e s (2) : " ' 



T, otherwise 

Since (j = rises e s( a ) ( mod p)» (f) = (~l) n(p) - The rest follows. 

Definition: If x G R, its integral part [x] is the largest integer < x. 

Proposition (Formulation III of Gauss' Lemma) Let p odd prime, and a G Z 
with p /a. Then 

(p-i)/2 . 
■1)*, where / = ^ r " / " 1 



P 



Proof. For every j G {1, 2, ... , 2^-} it is easy to see that 

a,j = qjp + dj, with < dj < p. 

Easy exercise: 



a 3 



P 
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So aj = a, - ]. 

Summing over all the j's from 1 to we get 



i=i 3=1 



p 



k k' 
i-l i=l 



where k' = ~~ { r «} — residues aj not in S, = residues in 



Also 



(p-i) 

2~ fc 



i=i i=i 



i=l 



Subtracting equation (2) from equation (1), we get 



i=l 



1 / p- 1 \ fP±l\ = P 2 ~ 1 



Thus 



p 2 -l 



8 



= E 



(a-1) 

even since a is odd 

Consequently, fc has the same parity as 

2 

E 

Review: p prime, a G Z, p /a: 



/c (mod 2) 



ja 
p 



1, a = mod p 
—1, a ^ mod p 



(Some also define ^ for all Z by setting (|) = if p|a.) 
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p = 2: Everything is a square mod p. So assume p odd from now on. One 
has the multiplicativity property 

(-) = (-)(-) n 



\P J \PJ \P 
This follows from Euler's result that 

— ) = (mod p). 
PJ 

p— 1 p— 1 

Note: Since p is odd, if a 2 = b 2 (mod p), for some a, 6 prime to p, then 
(f ) = (")• (*) reduces finding (-) to the three cases 

(i) a = -1 

(ii) a = 2 

(iii) a = q, an odd prime 7^ p 
We have already proved 



(i) 



(ii) 



Z±\ - (_d^ - I 1 ' ifp=l(mod4) 
p ) ' ' ' ' " " 1-1, if p= -1 (mod 4) 



2\ _ J 1, if p = ±1 (mod 8) 
p) ~ 1-1, ifp = ±5 (mod 8) 



(iii) g: odd prime 7^ p. 

16 The Quadratic Reciprocity Law 

Fix an odd prime p. If q is another odd prime, a fundamental question, as 
we saw in the previous section, is to know the sign {^j, i- e - ; whether or 
not q is a square mod p. This is a very hard thing to know in general. But 
Gauss noticed something remarkable, namely that knowing (^j is equivalent 

to knowing (j^jl they need not be equal however. He found the precise law 
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which governs this relationship, called the Quadratic Reciprocity Law. Gauss 
was very proud of ths result and gave several proofs. We will give one of 
his proofs, which incidentally introduces a very basic, ubiquitous sum in 
Mathematics called the Gauss sum. We will also give an alternate proof, 
which is in some sendse more clever than the first, due to Eisenstein. 

Theorem (Gauss) (Quadratic reciprocity) Let p, q be distinct odd primes. 



Then 




Explicitly, 




1, if p or q is = 1 (mod 4 ) 
— 1, if p and q are = 3 (mod 4) 



This theorem is very useful in computations. 
Example 




691-1 

It is not easy to compute (37) 2 (mod 691). 
Better to use then: 




1 




Proof # 1 of theorem: p, q odd primes, p 7^ q. Put 



2iri 

£ = e~ E C 



Then 



£ q = 1, but C ^ 1 if m < q. 
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£ is called a primitive gth root of unity in C. All powers of £ will be on the 
unit circle. In fact, we get a regular g-gon by converting the point 

u,...,^- 1 

cyclotong = "circle division" 

Put R = {a = a + ai£ + • • • + a£_i£ 9_1 |ao, ai, . . . , a g _i G Z}. Clearly, 
i? D Z, hence i? has 0x1. Let 

9-1 9-1 
i=l i=l 

be in R. Then 

9-1 

a ± (3 = J2( a i + b i)C e i2. 

i=l 

Since £ 9 = 1, given any n G Z we can write n = £g + r, 0<r<g — 1 by 
Euclidean algorithm in Z, and conclude that 

C = f • 

So i? contains all the integral powers of £. Then it also contains finite integral 
linear combinations of such powers. Consequently, 

af3 G R if a, f3 G -R. 

So i? is very much like Z. It is a g-dimensional analog of Z. This allows us to 
define the divisibility in R. To be precise, if a, f3 G i?, we say that /3 divides 
a, /3|ct iff 37 G R such that a = j3~f. 

In particular, R 3 p, and it makes sense to ask if p divides some number 
in R. 

Definition: Let a, (3 G R. We say that 

a = (3 (mod p) iff p\(a — b) in R. 

This allows us to do "congruence arithmetic" mod p in R. 

To study (|), Gauss introduced the following "Gauss Sum": 

*" S (;)<■■ 

a mod g 
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Clearly, S q G R. 

Aside (Not part of proof of Quad. Recip., but interesting) 




a=l 



¥)(fX a 



So if 



and if 



-1 

5 



pure read or im. 
Lemma 1: 

Proof of Lemma 1: 



— ) = -1, S q eRniR 



*=[ E ^ E )e 

\a mod <j x ' / \b mod g x 

- E E f^V? 



-6 



a mod (j b mod q 



EE(t)? 



So 



V 9 / 

= Ef(E 

c mod g \a mod </ 



s, 2 = E f E 

c mod c/ a mod <j 

= E e E 

c mod c/ a mod g 



a(c — a) 



ac — a 2 



9 

-a 2 (l — a'c)' 
9 
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where a' a = 1 (mod g) . 
But 

— a 2 (l — a'c)\ ( — l\ ( a 2 \ fl—a'c 



^ ^ i- 1 =1 as a=0 mod q 

=► 5 « 2 = (- 1 ) v E ^ c /( c )> 

c mod g 

where 



a mod g 

/(c) =? 

c = (mod q): 



/( c ) = E (~ ~~) a ^ 0mod <? 



/(0) ^ (;) 



a mod q 

a^O (mod g) 

=^/(0) = g-l 

c ^ (mod q): Note that, in this case, the set 

{1 — a'c\a mod g, a ^ mod g} 

runs over elements of Z/g — {1} exactly once. Indeed, given any 5 G Z/g, 
6^1 (mod g), we can solve (a' + 6 = 1 (mod g), and the solution is unique. 
Therefore, 



We proved earlier that 



t) mod g 

b^l (mod g) 



6 mod g 



SO 



/(c) = (-)=-!, 



when c ^ (mod g). 
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Consequently 



s, 2 = (-i)* 



c mod q 

c^O mod q 



Claim: E c mod 9 ^ = 0. 
Proof of claim: 



E « c = E « c = E « c+1 =« E « c 

c mod g ( c ~l) mod q c mod g c mod g 



=>• (1 - ^ f = r = as claimed. 

^Tq c mod g c mod g 

Proof 2 of claim: 

£ r = l + e+ ... + ^ = i^| 

c mod g 

= since £ 9 = 1. 

By claim, 

^ = (-i)^((g-i)+.(-i)(o-i) 
= (-i)^g- 

This proves Lemma 1. 

Lemma 1: = (— 1)^? 

Lemma 2: S^ 1 = (J) (mod p) 
(This happens in _R mod p) 

Proof of Lemma 2: 

p 



x a mod g ' 
a mod g ^ ^ ' 
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(2)9 = (2) because (|) = ±1 and p is odd 
In other words, 

S « = E (-)r(modp). 

a mod q 

Since p 7^ g, p is invertible mod g, and the map a h- >■ ap is a permutation of 
Z/g, also ap = (mod g) iff a = (mod g). so the sum over a mod q can be 
replaced with the sume over ap mod q. Write b for ap mod q. Then 

a = bp' (mod g), where pp' = 1 mod q). 



b mod q 

But 



^= E (^y(modp) (*) 



Q ) W \9 



Since p'p = 1 (mod g), 



p'\ f p\ f 1\ _^ ( p'\ ( V 

— i T 



So 



So (*) gives 



bp'\ ( b\ ( p 



v ^ 7 6 mod <j v ^ 7 



S?- 1 = Q (mod p) 

This is justified because 

S g ^ (modp), 

which follows from lemma 1. 
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Proof of Theorem: Compute S p 1 in 2 different ways. On the one hand, 
by lemma 1, 



Euler ( v ^ 2 (mod p 

s ^(y) V (i) < mod ^ 



i.e., 



fiP" 1 = (-1)(^)(^) Q (modp). 



On the other hand, by lemma 2, 



S?- 1 = Q (modp). 



So, putting them together we get 



S) -(-!,<*>(*>£). 



Last time, gave a proof of Quadratic Reciprocity law. More precisely we 
proved: 

Theorem (Gauss) Let p, q be distinct, odd primes. Then 
Example: 

Check if 29 is a square mod 43: 29 and 43 are distinct odd primes, so by 
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definition 29 = (mod 43) iff (§) = 1. by QRL, 

29\ = « /43\ = /43 
43/ v ; V29/ V 29 

^297 V29/ V 29 
— ) = -1 as 29 = 5 (mod i 



29 

l)-(4L-'-"-(f 
.¥)--(»- 

So 29 ^ (mod 43). 

Remark: QRL tells you a way to know 

1. whether q is a square mod p or not. But when it is a square, it gives 
no procedure to find the square root. 

2. One can use QRL to check whether a number is a prime, similar to the 
way one uses Fermat's little theorem. For example, one can show that 
m = 1729 is not a prime by looking at 

y def = ll 864 (mod 1729) 

Note: 864 = 172 ^ -1 . So, if m is a prime, y = ( j^g) (mod m). 
Since 1729 = 1 (mod 4), by QRL, 



11 \ /1729\ / 2 



1729 J V 11 / V 11 



-1 



as 11 = 3 (mod 8). on the other hand, one can check using PARI, or 
by successively squaring mod m = 1729, that 



11 8M = 1 (mod m). 

(This is part of a homework problem.) Get a contradiction! So the only 
possibility is that 1729 is not a prime (which is easy to verify directly 
as 1729 = 13 • 133 = 13 • 7 • 17). But this method is helpful, when it 
works, for larger numbers. 
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A histoical remark: G.H.Hardy went to see Ramanujan, when the latter 
was dying of TB in England. Then Ramanujan asked Hardy if the number 
of the taxicab Hardy came in was an interesting number. Hardy said "No, 
not interesting, just 1729". Ramanujan replied immediately, saying, "On the 
contrary, the number is interesting because it is the first number which can 
be written as a sum of 2 cubes in two different ways" . (Indeed we have 



A second proof of quadratic recip. (Eisenstein) (Eisenstein's trignometric 
lemma) 

Lemma: Let n be a positive, odd integer. Then 



1729 = 10 3 + 9 3 = 12 3 + l 3 . 



) 




Proof: Up to us. 

Example: 

n = 3 



Hint: treat as a polynomial in sinx: 



LHS 



sin 3x sin(2x + x) 



sin x sin x 

sin 2x cos x + cos 2x sin x 



sin x 

2 sin x cos 2 x + (1 — 2sin 2 x) sinrr 



sin x 




\ V3/2 J 



3 — 4 sin 2 x. 



Sketch of proof of lemma: Use induction on n to show that 



sinni 



/ n (sin 2 a;), 



SIM 
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where /„ is a polynomial in sin 2 x of degree t± y- . 

(/o(t) = l, / 3 (*) = 3-4t,...) 

On the other hand, the RHS of lemma is also of the form g n (sin 2 x), where 
g n is the explicitly given polynomial in sin 2 x of degree 

So it suffices to show that /„ and g n have the same roots and that the 

n-l 

leading coefficient of /„ is (—4) 2 . So when we use induction on n, check 

(»-i) 

that the leading coefficient is (—4) 2 and that its roots are 

2 27r J 



sin 



n 

Alternatively, check the constant coefficient by checking at x — > 0. 
Recall Gauss' lemma: 

V 



se5 



where S = {1, 2, . . . , and e x (q) G {±1} defined by 

qs = e s (q)s', with s' G 5. 

Applying sin(^), we get 

. (2Ttqs\ . {2ire s {q)s'\ 
sin = sin 

\ p J V p J 

= e s (q) sin 

since sin is an odd function. So 

( 2nqs \ 



2ns' 
P 



sin , 1 



sin 



2tts / N \ 



By Gauss' lemma, 



sin 1 ^ 

<? \ TT V p 



n 



/;/ ^sinf 2 ^ 



n^sm^) 

n se5 sm (^) 
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Note the map S h- > S' is a permutation of 5. So, 

Applying Eisenstein's trig, lemma with n = q and sub. in (3), we get 

Can get everything we need from this without computing the sines: 
Reversing the roles of p and q, we get 

Comparing (3) and (4), we see that 



17 Sums of two squares 

n = a 2 + b 2 ; a, b > 0, n > 1 

Note: 

For all integers a, 6, we have 

a 2 + b 2 = 0, 1 or 2 (mod 4) 

Indeed, a, b = 0, 1, 2, 3 (mod 4) =>• a 2 , & 2 = 0, 1 (mod 4) =>- a 2 + b 2 = 0, 1, 2 
(mod 4). So the numbers congruent to 3 mod 4 cannot be written as sums 
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1 = 


i 2 i n2 

Y + (r 


2 = 


-i 2 i i 2 
1 Z + 1 


3 = 




4 = 


r\9 i *"i9 

2 2 + 2 


5 = 


2 2 + l 2 


6=- 




7 = 




8 = 


2 2 + 2 2 


9 = 


3 2 + 2 


10 = 


= 3 2 + l 2 


11 = 




12= 




13 = 


= 3 2 + 2 2 


14= 




15= 





16 = 


A 9 

4 2 


, r\9 

+ O 2 


17 = 


4 2 


i 1 2 
+ 1 


18 = 


3 2 


+ 3 2 


19 = 






20 = 


4 2 


+ 2 2 


21=- 






22=- 






23 = 






24=- 






25 = 


5 2 


+ 2 


26 = 


5 2 


+ 1 2 



27=- 
28=- 

29 = 5 2 + 2 2 
30=- 



31 = 

32 = 4 2 + 4 2 
33=- 

34 = 5 2 + 3 2 
35=- 

36 = 6 2 + 2 

37 = 6 2 + l 2 

38=- 
39=- 

40 = 6 2 + 2 2 

41 = 5 2 + 4 2 
12 

43 = 



of 2 squares. It appears from this table that if p is an odd prime, we may 
write p = a 2 + b 2 iff p ^ 3 mod 4. 

Lemma A: If m, n are sums of 2 squares, then so is their product mn. 

Proof: Use the identity (A 2 + B 2 )(x 2 + y 2 ) = (Ax + By) 2 + (Ay - Bx) 2 

Proposition A. Let p be a prime congruent to 1 mod 4. Then p is a sum 
of two squares in Z. 

Proof of Proposition A. First we claim that there exists integers A, B, m, 
with 1 < m < p, such that 

mp = A 2 + B 2 (1) 

Indeed, since p = 1 (mod 4), (^) = 1 and so we can find n G Z such that 

n 2 = — 1 (mod p). It was proved earlier that the set T : {1,2,..., ^-} is a 
set of representatives for the squares in (Z/p)*. Hence we may choose n G T 
such that 

n 2 + 1 = mp, 
for some integer m > 1. Since n < |, we have: 

m = -(n 2 + 1) < - + l) <p, 

p n4 J 
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which proves the claim. 

Now there may be more than one m for which (1) holds. (Of course {A, B) 
will depend on to.). So we may, and we will, choose to to be the smallest 
integer > 1 for which (1) holds. Of course, to < p. We are done if to = 1, so 
we will assume that m > 1 and derive a contradiction. 

Find x, y E Z fl [— y , y] such that x = A mod m, y = B mod m. 

Then 

x 2 + y 2 = km, for some integer k > 1, (2) 
since A 2 + 5 2 = mod m. 

By construction, 



So A; < m. Applying the identity proving Lemma 1, we obtain 
(x + y )(A + B ) — km ■ mp = m kp 
= {Ax + By) 2 + {Ay - Bx) 2 . 



nr in' 2 to 2 /;/ 



Notice that 
So 

and this gives 
Hence m\{Ax + By), and 



Ay = xy = xB (mod m). 
m 2 \{Ay - Bx) 2 , 
m 2 \{Ax + By) 2 . 



** + B»\ + (Ay-Bx (3) 



m J \ m 

Since k < m, and (3) gives a contradiction to the minimality of m. 

Example: p — 41, 9 2 = 81 = — 1 (mod p) 

Start with 9 2 + l 2 = 2 • 41, x,y E Z n [-1, 1] such that x = 9 (mod 2), 
y = 1 (mod 2). Pick x = y = 1, 

+ % 9 • 1 + 1 • 1 r 
= = 5 

m 2 

Ay - Bx _ 9 • 1 - 1 ( 
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This gives: 

41 = 5 2 + 4 2 . 

Proposition C. Let p be a prime = 3 mod 4. Then no integer n divisible 
precisely by an odd power of p can be written as a sum of two squares. 

Theorem Let n > 1 be an integer. Then n can be written as a sum of two 
squares iff every prime = 3 (mod 4) occurs to a even power in its prime 
factorization. 

Proof of Theorem (modulo Proposition C) 

(=>•): This is because Proposition C says that any prime congruent to 3 mod 
4 has to occur to an even power r in n. 

(<=): Let r = pip 2 . . .p m qf n ■ ■ ■ q 2n£ , with Pi = 1 mod 4, qj = 3 mod 4. By 
Prop. B, p,i is an sum of two squares, and q 2 ™ 3 = (qlf 1 ) 2 + 2 . Thus n is 
a product of numbers which are sums of two squares, and we are done by 
applying Lemma A. 

Proof of Proposition C: Let p = 3 (mod 4) be a prime. Suppose 

n = a 2 + b 2 , with p 2s+1 \\n. 
Let d = (a, b), so that d 2 \(a 2 + b 2 ) = n. Hence 

G) 2 =G) 2+ G) 2 - if 

So we get 



nab 
m= d' X= d' y= d- 



m = x + y , with gcd(x, y) = 1, 



and 



p 2s+l \\m. 



In particular, p\m, but p does not divide both x and y. But if p\x, as 
m = x 2 + y 2 , p\y 2 , and so p\y. Consequently, p J(xy. 
It follows, since (p, x) = 1, that 

Ax — = t 

is solvable in Z for all t. Take t = y to get Arc = y (mod p). 
Then 

= x 2 + y 2 = x 2 (A 2 + 1) (mod p). 
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Since p J(x, get: 



A 2 



+ 1 = (modp). 



But (-^-) = —1 as p = 3 mod 4, giving a contradiction. 

Questions: 

1. What if one considers sums of k squares with k > 2, e.g., 7 = 2 2 + l 2 + 



In Section 19, we will prove that any positive integer can be written as 
a sum of four squares. 

2. If n = a 2 + b 2 , in how many ways can one write n as a sum of two 



squares? 

Example: 25 = 5 2 + 2 = 4 2 + 3 2 
65 = 8 2 + l 2 = 7 2 + 4 2 
Note in general that 

(x 2 + y 2 )(A 2 + B 2 ) = (xA + yB) 2 + (xB - yA) 2 
= {xA-yBf + {xB + yA) 2 

Example: 

25 = 5-5 = +(2 2 + l)(2 2 + l) 



When do these two ways of writing it coincide? 
They do iff we have 



1 2 + 1 2 . 



(x-2 + l-l) 2 + (2-l-l-2) 2 
(2-2-l-l) 2 + (2-l-l-2) 2 




{xA + yBf 



(xA - yB) 2 



or 



(xA + yB) 2 



(xB + yA) 2 



First case: 

Square both sides to get 



xyAB = i.e., at least one of x, y, A, B is zero.. 
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Second case: Here we get 

x 2 A 2 + y 2 B 2 = y 2 A 2 + x 2 B 2 

^x 2 (A 2 -B 2 )+y 2 (B 2 -A 2 ) = 

^(x 2 -y 2 )(A 2 -B 2 ) = 

<=?x = y ox A = B 

Claim: If p = 1 (mod 4) is a prime, then p = a 2 + b 2 uniquely. 
Indeed, suppose p = a 2 + b 2 = c 2 + d 2 , for a, b,c,de Z. Then 

a?d 2 - b 2 c 2 = (a 2 + b 2 )d 2 - (c 2 + d 2 )b 2 = p(d 2 - b 2 ) 

=>- ad = be (mod p), or ad = —be (mod p). 
Clearly < a,b,c,d < y/p. So 

ad = be, or ad = p — be. 

If ad = p — be 

p 2 = (a 2 + b 2 )(c 2 + d 2 ) = (ad + be) 2 + (ac - bd) 2 
= p 2 + (ac — bd) 2 =>- ac = bd 

Hence a\bd, and gcd(a, b) — 1. =>■ a|d. Also d|ac, and gcd(c, d) = 1, so d|a. 
So a = ±d, so a = d. =>■ 6 = a 

If ad = be, we find that a = c, b — c, and also c = d. Now the uniqueness 
assertion follows. 

18 Gaussian Integers 

Definition: Z[i] C C = {a + i& : a, b G Z} 

Elements of Z[«] are called Gaussian integers, which can be added, sub- 
tracted and multiplied. But we cannot divide in Z[i]. For example, = 
|(1 - i) (£ Z[i\. Note: if af3 = =>• a = or = 0. Define the norm 

iV : Z[i] -> Z+ 

by 

a = a + bi i— > a 2 + 6? = (a + 6i) (c — 6«) = «« 
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The complex conjugation map a i— > a satisfies: 
a + P = a + (3, af3 — a • (3. 

So 

N{af3) = apap = aapp = N(a)N(p) 
Notice that in C, a^ 1 = -r^r 

N(a) 

Definition: a,P in Z[ij. Say a\P iff P — a • 7, some 7 G Z[i]. 

Definition: A unit in Z[i] is an element a in Z[i] such that aP = 1 for some 
P G Z[i]. If a is a unit in Z[i], say aP = 1, 

JV(a/3) = iV(l) = 1 = N(a)N(P). 

If a = a + bi, a, b G Z, 

(a 2 + b 2 ) = N(P) = 1 

Hence 

a = 0, 6 = ±1, or a = ±1, 6 = 0. 
This means a — ±1 or ±i. Put 

£> = {a + fez : a > 1, 6 > 0} 

a ~ /3 ("associated") iff a — uP for some unit u in Z[i]. 
If a 7^ 0, there is exactly one associate of a in D, the normalized associate. 
it E Z[i] is called a Gaussian prime if its only divisors are units and its 
associates. 

Question: What are the Gaussian primes? 

(l + i)(l — i) — 2 so (l±i)|2. Hence 2 is not a Gaussian prime. 1 + 2 + i are 
Gaussian primes, so is 1 + 2i because it is an associate of 2 + i. (Conjecture: 
a + ib is Gaussian prime iff (a, b) = 1.) 

Unsolved Problem: If you are allowed only steps of bounded size, is it 
possible to walk to 00 stepping only on Gaussian primes? 

Euclidean algorithm: Recall the norm function 

N : Z[i] -> Z 
a + bi I— > a 2 + b 2 
a I— > a«, 
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which is multiplicative, i.e., 

N(a(3) = N(a)N((3) 

Given a,f3 G Z[i], (5 ^ 0, 3 [unique] p, k G Z[«] such that a = k/3 + p 
and ^ N(p) < ™. 

Proof: Vrr G K, let round(rr) = closest integer to x. Then \x— round(x)| < \. 
Choose round(i) = 1 and let round(x + iy) = round(x)+iround(y). 

Let z = | = C. 

Let k = round(z). 

N(z — k) — N(z — round(z)). 

= N((x — round(x)) + i(y — round(y))) 

— (x — round(rr)) 2 + (y — round(y)) 2 < - 
n . a fa 

Si nC e- = «+^--K 

ct = (3k + p, 
with p = (a - /3k), < N(p). 

a a — nj3 
Then z — k= — — k = — , and 

P P 
N(z K) _ N(a - «g) _ iV(p) 1 

Corollary: The ring Z[i] has unique factorization into Gaussian primes. 

Proof: Similar to the proof in Z, with gcd(a, j3) being defined using the 
Euclidean algorithm. 

Now investigate what Gaussian primes look like. 

N(3 + i)= 9_+_l =10 = 2-5 

[sum of squares] 

[Notice relatioship to sums of squares!] So 3+i must be divisible by something 
of norm 2 and something of norm 5. 2 + i, 2 — % has norm 5, while 1 + i has 
norm 2. 

(2 + + i) = 2 + 3i - 1 = 1 + Si 
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(2-i)(l + i) =i + 3 

Theorem: Let p be a prime of Z. If p is not a Gaussian prime then p = 
7T7f, 7r, ?f Gaussian primes. (7r 7f if p is odd). Also, p has no other divisors. 
Moreover, p is not a Gaussian prime iff 

p = 2 = (l + i) 2 

or 

p = 1 (mod 4). 

Consequently if p = 3 (mod 4), p is a Gaussian prime. 

Conversely, every Gaussian prime n is either a rational prime = 3 (mod 
4) or its norm is a rational prime ^ 3 (mod 4). In the latter case, N(ir) = 2 

iff 7T ~ 7T . 

Proof: By unique factorization, we may write p = wki . . . 7i m , with w a unit, 
and the tt/s Gaussian primes. 

m 

N(p) = pp = p 2 = UNfc). 

3=1 

Thus 3 unique j such that N(nj) = p 2 . Then m — 1 and p = wki. Conse- 
quently, p is a Gaussian prime. So if p ^ Gaussian prime, then none of the 
N(-k j-)'s are p 2 . So 

P = 7Ti7r 2 

with 7Ti,7T2 Gaussian primes, Nfa) = p. Since 7Ti,7r 2 ^ Z, and 7Ti7r 2 G 

Z, 7T 2 = 7fT. 

Assume p is odd. Then 7r ~ n means 7r = a + bi ~ a — hi. The associates 
of 7r are ±(a + i6) and ±(a + ib). This is because the units in Z[i] are ±1, ±i. 
Then a — ib = 7(0 + where 7 G {1 — i}. If 7 = 1, p = a 2 , if 

7 = — 1, p = 6 2 ; and if 7 = ±«, p = 2a 2 . None of these is a possibility as p 
is an odd prime. Thus ir, tt are not associates, andp = Tin, with 71 Gaussian 
prime of norm p. When p = 2, we have 2 = N(l + i) = (1 + i)(l — i), and 
1 _f = 

We have yet to show that an odd rational prime p is not a Gaussian 
prime precisely when p = 1 (mod 4). But we have just shown that p must 
be of the form N(tt) for a Gaussian prime 7r when p is not itself a Gaussian 
prime. Then 3x, y G Z such that 

2 1 2 
p = x + y . 
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As we have seen in the previous section, this implies, as derived, that p = 1 
(mod 4). But we can also check this directly. Modulo 4, the square of any 
integer must be or 1. Then p = x 2 + y 2 must be or 1 mod 4. Since p is 
odd, it must be 1 mod 4. 

Now let n be any Gaussian prime, which is not in Q. We have to show 
that N(ir) = p with p = 1 (mod 4) or p = 2. Since N(ir) is an integer > 1, 
and since N(tt) cannot be 1 as ir is not a unit, there must be some (rational) 
prime q dividing N(tt). Write N(n) = qiq 2 ...q r , with each qj a rational 
prime. Now since N(n) = nn, and since n is a Gaussian prime, viewing 
7T7f = qiq 2 ... g r as an equation in Z[i], we see that 7r must divide some qj, 
call it p. By what we proved above, p must be the norm of some Gaussian 
prime 7Ti. Then n divides p = iiiWi. So n must divide 7Ti or Trf, say it divides 
7Ti. Then 7T ~ 7Ti, and we will have p = unit, for some unit w. But both p 
and 7T7T are real and positive, so u must be 1. The rest is clear. 

19 Sums of Four Squares 

The following result of Lagrange is surprising at first; it had been predicted 
earlier, i.e., before Lagrange, by Fermat. 

Theorem (Lagrange) Every positive integer n is a sum of four squares. 

Proof. We may take n to be > 1, as 1 = 2 + 2 + 2 + l 2 . We need two 
lemmas. 

Lemma 1 Let Xj,yj E Z, with 1 > j > 4. Then 

{x\ + x\ + x\ + x\) (yf + y\ + y\ + y\) = z\ + z\ + z\ + 4 

where = x x y x + x 2 y 2 + x 3 y 3 + x 4 y4, z 2 = x x y 2 - x 2 yi + x 3 y 4 - x 4 y 3 , 
z 3 = x x y 3 + x 3 y x + x A y 2 + x 2 y 4 , and ^ 4 = Xiy 4 + x A y x + x 2 y 3 + x 3 y 2 . 

The checking of this, called Euler's identity, is straightforward and is left 
as an exercise. 

Lemma 2 Let p be an odd prime. Then 3 integers x, y, m, with 1 < m < p, 
such that rap = x 2 + y 2 + 1. 

Proof of Lemma 2: Put T = {1 < j < ^-}. Then we have seen earlier that 
the squares of elements of T are pairwise unequal, i.e., the set Ti = {x 2 \x e 
T} has cardinality 2=^. But the set T 2 = { — 1 — y 2 \y e T} has the same 
property. As p is odd, there are exactly squares in (Z/p)*. So we must 
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have Ti = T 2 (mod p). Consequently, Eta, y G T such that x 2 + y 2 + 1 = mp, 
for some integer m, which is evidently > 1. Moreover, as x, y G T, x 2 , y 2 are 
bounded from above by Hence 

mp = a; 2 + y 2 + 1 < ^- + 1 < p 2 , 

which implies that m < p. 
This proves the Lemma. 

Proof of Lagrange's theorem (cont.) 

Thanks to Lemma 1, and the fact that 2 = l 2 + l 2 + 2 + 2 , it suffices 
to prove the Theorem for odd primes. Pick any odd prime p. Let mo be the 
smallest integer with 1 < m < p such that 

m p = x\ + x\ + x\ + x\ (1) 

for some xi, X2, x%, X4 G Z. By Lemma 2, 3 such an m . If m = 1 we are 
done, so assume not and derive a contradiction. 

Claim: m is odd. 

Proof of Claim Suppose itlq is even. Then either all the Xj's are even or all 
of them are odd, or exactly half of them are odd. In the third case we may, 
after renumbering the Xj, assume that x±,X2 are even and x 3 ,x^ are odd. It 
follows from (1) that 

/ 1 \ / \2/i\ 2 / \ 2 

mop I x\ + X2 \ ( X\ — X2 \ ( x% + X4 \ f x% — X4 



+ + P 1 ^ + PP (2) 



Then as Xl ± X2 and X ^ XA are integers, we get a contradiction to the minimality 
of mo- Hence the claim. 

Proof of Theorem (cont.) 

So m is odd and > 3. Let us write (Vj) 

x i = Vj + a j m o, (3) 

with cij G Z chosen such that \yj\ < ^ (check that this can be done; the 
oddness of m is essential). 

Since m < p, not all the Xj can be divisible by m . Consequently, 

Ey?>o (4) 
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We also have 

±VI = < (5) 

But (1) + (3) implies that 

4 

Y^Vj= Q ( mod m °)- (6) 

This means we have 

< y\ + y\ + y\ + yj = km , (7) 

with < k < ttiq. 

Applying Lemma 1 with the Zj defined by the Xj + yj, we get 

z \ + z l + z l + z l — mlkp. (8) 

But 

4 4 4 

Zi = ^^XjUj = Xj(xj — ajino) = = (mod m ) 

j=i j=i j=i 

Similarly, z 2 = z s = z^ = (mod m ). So = m^Wj, with tUj G Z, Vj < 4. 
Substituting this in (8) we get 

kp = w\ + w\ + w\ + W4, (9) 

with 1 < fc < m < p. 

Since this contradicts the minimality of m , we get the derived contra- 
diction. 



20 Approximation by rationals (Diophantine 
approximation) 

We all know that real numbers can be approximated by the rationals | (with 
(p,q) = 1)- But how well can this be done? And does it depend on the 
nature of x? We will try to answer these questions now. 
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For any x e R, let [x] denote its integral part. 

Theorem 1 (Dirichlet) Let x be an irrational number. There 3 infinitely 
many rationals | (with (p, g) = 1) such that 



P 

x 

Q 



1 

< 



q 2 ' 



Remark 1: This theorem is false for the rationals. Indeed, suppose4 x — | 
and | ^ f a rational with \q\ > \b\. Then \x - J| = |^| > i > Let 
/ = [[x] — 1, [x] + 1]. If | ^ /, then clearly, |x — | > 1. We are done now, 
because the number of - in / with \q\ < \b\ is finite. 

q ' ' 

Proof of Theorem 1. This is done by first establishing the following result, 
also due to Dirichlet: 

Proposition Let x,t e R with t > 1. Then 3p, q e Z such that 1 < g < i 
and |gx — p| < |. 

Proof of Proposition Let {x} denote the fractional part of x, lying in [0, 1). 
Suppose t is an integer > I. Then the t + 1 numbers 0, 1, {x}, {2x}, . . . ,{(t — 
l)x} lie in [0, 1], and so the difference between some pair among these must 
be in absolute value bounded by t~ l . Then 3mi, m2, ni, ri2 G Z with < 
rrii < t — 1, i — 1,2, and mi 7^ m 2 , such that |(mix — ni) — (m 2 x — n 2 )| < |. 
We may assume that mi > m 2 . Then the Proposition is satisfied by taking 
p = n 1 —n 2 and q = m x — m 2 . Done if t e Z. Suppose £ ^ Z. Then t' = [i] + 1 
is an integer > 1, and Bp, q with 1 < q < t' and \qx — p I < \,. Evidently we 
have: 1 < q < t and \qx — p\ < h. Hence the proposition. 

Proposition Theorem 1: Since x is irrational, the bound \qx — p\ < | 
can hold, for a fixed (p, q), only for bounded values of t, say for t < t H — = 
to(p,q)- Hence, as t — > 00, there will be infinitely many distinct coprime 
integers (p, g) as in Proposition, giving rise to infintely many - satifying 

Theorem 2 (Hurwitz) Let x be irrational. Then 3 infinitely many | with 
(p, g) = 1 such that |x - J| < 

Remark 2: Hurwitz's theorem is the best possible. Indeed, suppose x is a 
real quadratic irrational and suppose 3 infinitely many | e Q with (p, g) = 1 
such that 

x-^ <^ n 

q < Cg 2 U 
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for some C > 1. Let f(X) = aX 2 + bX + c be the integral polynomial with 
root x. Then f(X) = a(X — x)(X — x') (over R) where x' is the conjugate 



root. For every | satisfying (*) we have 



— < 

i2 — 



./ 



< 



X — 



V 



ax 



< 



Cq 2 



a ( x' — x + x — 



P 



+ 



Cq 2 C 2 q^ 



where D = b 2 — Aac = a 2 (x — x') 2 . It follows that C < \f~D. In the special 
case when x = , fix) = x 2 + x — 1, we have D = 5, and so C < v^- 

Definition x E K. is an algebraic number iff 3 /(X) e Q(X) such that 
/(x) = 0. It is transcendental if it is not algebraic. 

Fact 7r, e are not algebraic. 

Definition An algebraic number x has degree d if d is the minimum of the 
degrees of polynominals f(x) such that f(x) = 0. 

Theorem 3 (Liouville) Suppose x is a real algebraic number of degree d. 
Then 3 c = c(x) > such that 



x — 



P 



> 



c(x) 



for all rational numbers | ^ x, with (p, g) = 1. 



Corollary: a :=J2 



i 



n>l 2 r ' 



is transcendental. 



Indeed, let us put p m = 2 m! J2™=i W and 



x — 



Pn 



y- 

/ j on! 



< 



2 m! . Then 
2 



n>m 



2(m+l)! 



n m+l 
'dm 



Hence for any d and any constant c > we have 



x — 



7>r, 

q„ 



< 



for all large enough m. 

So x can't be algebraic of any degree d. Done. 
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Proof of Theorem 3 Let f(x) be the (minimal) polynominal of x with 
deg / = do, coprime coefficients, and positive leading coefficient. Taylor's 
formula gives 



./ 



p 

q 
if 



v 

X 

q 



71=1 

< I. 



< 



c(x) 



p 



— X 



p p p 

Let - be a rational such that - ^ x. Then /(-) ^ by the minimality of 
q q q 

f. So |/(^)| <1. So we get 



1 1 

— : < 



c(x) 



X 



p 



if I x\ < 1. The Theorem is of course obvious if I xl > 1. 

9 q 
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